[solved]Random Pages Being Created in CMSMS 1.10.1

[Zafazo]

Version Info
CMSMS: 1.10.1
Server:
Apache: 2.2.21
PHP: 5.2.17
MySQL: 5.1.56
Architecture: i686
OS: linux

Alright the page below (among others with the same kind of url)
http://www kofo com/?id=cialis-viagra-levitra-phorum-view-topic

are not necessarily being created since it seems anything is acceptable after the "id=".

However, these pages are being indexed by Google and others as actual pages on are website.

As seen below:
A visitor from crawl-66-249-XXX-XXX.googlebot.com (66.249.XXX.XXX) came on 2011-12-14 13:27:04. This visitor first arrived from
and visited /?id=cialis-drug-intereactions

On another note the people "making" these pages are from places like Korea so I simply blocked their ip's with the .htaccess file.

Basically I figured this may be a problem with CMSMS or just that I don't have a .htaccess file set-up correctly or missing things that should be there.

Point being we don't want these keywords to be associated with are website and other people who may run into this problem probably don't either.

If any other info is needed please ask.

[Dr.CSS]

If these links are really being found by google then someone has access to your server, most likely a shared server with lacks security or someone else has a site on it that has a script that lets them in, not a CMSMS vulnerability...

[Wishbone]

I think DrCss misunderstood. There are no pages being generated.. They are just being indexed by Google.

Not a CMSMS issue. Even Google will take that parameter and not show an error.

https://www.google.com/?id=cialis-viagr ... view-topic

You can't help how people try to link to your site.

[Zafazo]

Wishbone is correct!
Sorry for my somewhat deceiving title and explanation

I'm not a Webmaster master but I am learning little by little.

And I wasn't sure other then using .htaccess's rewrite engine if there was anything else I could do to prevent this type of linking or url's from being possible.

[Wishbone]

You can never block people linking to anything... However, it might be possible using .htaccess (I'm not an expert) to throw a 404 for any parameters that you don't recognize. Google probably won't index it if there's nothing there.