Thanks for posting back about the encoding of the serialized session array. I have used the serialize function like this in the past with good results. It will also be harder for anyone to pick through the values in the cookie if it is serialized like this. Good work, I'm bookmarking this one for future reference.