Path disclosure protection

https://github.com/opencart-ce/opencart-ce/pull/46