If you don't want to use cookies:

1. you can use a hidden field to store a user session key, and then
2. use the session key as the lookup key for your DB_File or DBI data store.

This will reduce the amount of traffic that you have to send back and forth, and it allows you to pass the session key to other scripts, etc. with minimal effort.

--
.dave.