You have to have some way to correlate one hit with the next. The easiest way is with a session ID that you hold in a hidden field, mangled URL, cookie, basic-auth, or mangled hostname.

-- Randal L. Schwartz, Perl hacker