a session isnt a cookie.. a session id is stored in a cookie, but that is just an encrypted string.
i use sessions all the time in php here at jodo and i have never had any problem with them not lasting.
there is really no other logical way to do a login system. if you are worried about...