Some ways to pass a session ID around:

• Cookie
• PATH_INFO - http://my.host.com/myscript.cgi/1234567890/function
• URI Parameter - http://my.host.com/myscript.cgi?sessionid=1234567890
• Hidden fields in forms

The framework I use for web apps attempts to set a cookie. If that fails, it builds its URIs to include the session id. It can then pull the session ID out of $ENV{PATH_INFO}.

---
print map { my ($m)=1<<hex($_)&11?' ':'';
$m.=substr('AHJPacehklnorstu',hex($_),1) }
split //,'2fde0abe76c36c914586c';
[download]