Ah, okay. Well, just use cookies to store a unique session id on every person who's connecting to your server and give them a short, but not too short expiration time. You might want to store username and password (as MD5 hashes) in cookies as well, because then the user doesn't have to login every day when he enters your site or when his session id expires due to some inactivity or something.