consistent use of "defined('_JEXEC') or die"