I had my admin change the session.use_trans_sid = 1 to =0 no more sess ID in the URL - woo hoo I guess this has to be 0 or in later versions 4.3.0 session.use_only_cookies = 1 ********************************************* Hello I have tested this app on my machine but it doesnt do this - but when testing on development server, my script is displaying the session in the url. I was reading in man about session.use_only_cookies can keep this from happening but the dev server has php 4.1.2 Is there another way to stop this? My script is such: while($row = mysql_fetch_row($res)) { echo "<li><a href = sess_downloads_p2.php?$row[0]>$row[1]</a></li>"; } where $row[0] is a filename like filename.pdf But when sess_download_p2.php loads in browser the URL has ...&PHPSESSID=(rand number) Thanks for any help -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php