Comment 28 for bug 224971

"?action=AttachFile" should be blacklisted in robots.txt - then Google bot won't download these attachments and won't push up the pagerank of the spammer's sites.