If a  person placing the order does not have the "cookies" options turned on on the
browser, the shopping cart will not hold on to the variables. This is a
function of active server pages that is a necessity. 
Some  people still think that enabling the cookies in the browser causes a
security risk because the remote server stores a piece of information on
your computer. The only item it is allowed to store is a
value to a variable  Nothing  is executable and can therefore cause
damage. Cookies can only be read by the server that issued them, so there
is no private information passed along either.