Activeco; thanks for your reply, but we are not using sessions in the URL, we are using cookies.
Wige; cheers - I have to ask, do you have proof to back up your statement that spiders are stateless? I want to believe you, but it will mean that I'll have to come up with something else to stop email harvesters from access

(