Yes.. The session works without cookies if the session.use_only_cookies is off in the php.ini. If the cookies is disabled in the Browser it passes the SESSIONID through the URL.