RichardG
Honorary Master
In all honesty that will be your best solution to stop session id's from being given access to both spiders and visitors/customers. The Session ID is created during the login/create account screens, and then removed when the customer browses further...
Unless there is something I am missing, but why would you not want the session ID to be created when they login/buy an item? It is not as if they will be posting links of the shopping cart/login screens?
here we go as well : http://www.digitaladdiction.co.za/index.php?cPath=160&osCsid=c3bf98001850231b62a98bcb669f858d