sessions; it encodes all the value into the cookie which means little/no security, transfer costs, and storage limits.
Bharat Mediratta