session
cookie
url encoding
hidden field