Fixed path disclosure through constructor
Details: http://www.techchattr.com/never-use-opencart