This came up eariler. If only I knew where. One possible solution of several is to save thestate in a hidden field within the CGIed pages. Of course, you should encrypt these, possibly with two MD5 hashes as mentioned (found it)
. This is cookie-free and provides the same save-in-the-browser functionality.