Hi, Please clarrify my doubts.. 1. when can we use URL writting, hidden fields, cookies and HttpSession to handle session? 2. if the client disabled the cookies, what will happen to the session? how can we handle the session if the client disabled the cookies? 3. is HttpSession uses cookies to handle session ? thanks , Thennam Pandian.