I can heartily recommend CGI::Session -- works like a champ. There is, however, a typo in the documentation: the call $session->header does not, as advertised, output the header -- it just generates it and returns it. You still have to print out the result.