PHP Code Injection in X-Cart