Google shouldn't be spidering urls with xid in it as that passes session variables that would be attributed to those who use them. You may want to check your session handling to sure that sessions are being handled transparently.
X-Cart itself handles the acceptance of the xid= urls and then redirects them without a 301 redirect, cdseo shouldn't overwrite that as it would negatively affect session handling. If you wanted to make the redirect a 301 you could modify the x-cart routine which I believe is located in include/sessions.php
|