You could pass as 'hidden' form variables instead of on the URL..
>Using ASP certain session variables are set such as session('gRepKey')=444. At a certain point the requirement is to connect to another server using IP address '123.123.123.123/OpenOrders.asp' to retrieve order information. When this happens the session variables become unavailable in the OpenOrders.asp.
>
>Why is that?
>We do not want to use '123.123.123.123/OpenOrders.asp?Repkey=123' which will create a confidentiality issues.
>How can I get around this issue?