Not a critical issue but ./include/cp_header.php should use require_once instead of include_once when including mainfile.php. Mainfile contains critical code and it should always be included.