> You can save the session info in a database also... No explicit need for
> cookies:) You should never rely on them since you many people could be
> behind a firewall that just filters them out and they have no chance to
> change that fact. The same goes with javascript...
Saving session information in a database is more overhead.
Note: Session variables are server side, stored in a file on the
webserver named the same as the session ID.