I have PHP configured/compiled (with Apache on a WINbox) so that session IDs aren't shown in the URL(s). It works for the most part, but occassionally PHPSESSID be shown. ie., NORMALLY the page url shown in the location bar is: http://hup.ca/hup_pix.php BUT sometimes I'll get: http://hup.ca/hup_pix.php?PHPSESSID=a324dff434etc There doesn't seem to be any pattern to when its shown/not shown.. except perhaps if a link is clicked before the page is full loaded? Any PHP experts know why this happens? How to prevent it?