Why would the cookie data need to exceed 4Kb in length? Brand their browser and use the cookie brand to identify the state information that you store in a database. You can read about this from one of merlyn's columns.

If you are concerned about clients that don't allow cookies, this makes it more difficult as you will need to parse all of the hyperlinks and add the session brand there (or add it to hidden fields in forms).

Cheers,
Ovid

Join the Perlmonks Setiathome Group or just click on the the link and check out our stats.