Thanks for the response. Unfortunately though, I don't know what you mean.
What I'm looking to find out is if something in phpbb's scripting is overriding my php.ini file. Even when someone puts their mouse over the login link on my forum, you can see the session ID showing in the browser's staus bar.
Even worse for security, is I have no idea if my global registers are really off. My custom php.ini says they are, but it doesn't seem to be having an effect.
I notice that session ID's don't show on this forum. How did the phpBB guys accomplish that?