[pteerapr]

in 4.0.18 there is include/func.php. There is no includes/func/func.core.php. I could find the exact code as recommended in the document. I assume that making change to the code according to this recommendation would also help prevent search engines from picking up Sesson IDs when visiting X-Cart.
Wonder if other user of 4018 version do the same.

III. includes/func/func.core.php
===================
RECOMMENDED:
The following change to "func.core.php" is recommended
to help prevent search engines from picking up Sesson IDs
when visiting X-Cart. This *issue* has been reported to X-Cart
devs and will be fixed in the next release of X-Cart (4.1.4).

NOTE: This change is for X-Cart 4.1.x series. Owners of 4.0.x, please
verify if this alteration is needed.

-----------
Find Code:
-----------

if (!empty($XCARTSESSID) && !isset($HTTP_COOKIE_VARS[$XCART_SESSION_NAME]) && !eregi("$XCART_SESSION_NAME=", $location)) {
$location .= ((strpos($location, '?') != false)?'&':'?')."$XCART_SESSION_NAME=".$XCARTSESSI D;
}

------------
Replace With
------------

if (!empty($XCARTSESSID) && !isset($HTTP_COOKIE_VARS[$XCART_SESSION_NAME]) && !eregi("$XCART_SESSION_NAME=", $location) && !defined('IS_ROBOT')) {
$location .= ((strpos($location, '?') != false)?'&':'?')."$XCART_SESSION_NAME=".$XCARTSESSI D;
}