When I did something like this I went the completely opposite - server side storage and cookies. And I had a page for every single script. That sounds horrendeous, but it worked quite well after I made a module to include in each script. It checked cookies, connected to the database, etc. Then each cookie just contained the form validating bits, and was usually no more than 50 lines.

It also turned out to be a good idea because the client kept changing his mind on bits, and I had the flexibility to accomodate him.

Also, having done this before I would recommend keeping away from monolithic routines like that unless you really like dealing with if statements nested five or ten levels deep.

HTH, and I have a funny feeling I've seen a CPAN module to automatically handle the hidden fields thing. ovid was into this a while ago, you might want to browse through his old code posts too.

____________________
Jeremy
I didn't believe in evil until I dated it.