That's good to know. Cookies certainly seem to have their share of security holes. Looks like this isn't as easy as I originally thought. Nonetheless, it is a good learning experience. Thanks for your advice. Joe
I have casually come across this link:
Basic Web Session Impersonation: a good reading, the more so if you're new to the field of securing web applications.
Ant9000