xcart

database values are in config.php

# $sql_host - DNS name or IP of your MySQL server;
# $sql_user - MySQL user name;
# $sql_db - MySQL database name;
# $sql_password - MySQL password.


usual work flow of authenicated pages is
require "./auth.php";
auth.php  includes the following

@include_once "./top.inc.php";
@include_once "../top.inc.php";
@include_once "../../top.inc.php";
if (!defined('DIR_CUSTOMER')) die("ERROR: Can not initiate application! Please check configuration.");

require_once $xcart_dir."/init.php";
important function x_load defined in include/func/func.core.php
it includes file like this
x_load("backoffice");
includes include/func/func.backoffice.php

template engine is smarty

Password encryption is done in function text_crypt in includes/funct/func.crypt.php