If you can't use sessions, you could keep all the needed stuff in the request, by using hidden parameters. Get the needed values from the submitted form, then put them in hidden tags.
I'm also curious about why you can't use sessions, as the above method works, but maintainability is close from 0%
