MRBS 1.12.2 等保2.0二级整改完整提交

包含：登录失败锁定、90天密码有效期、30分钟会话超时、
强制改密、登录审计日志、屏幕水印、企业背景图、
备案信息固定底部、favicon、JS空集合保护、
会话过期体验优化（403 JSON）、display_errors 关闭、
固定 key 根治 Integrity check failed 等全部改动

注意：config.inc.php/.htaccess/.user.ini 含敏感信息，
通过 .gitignore 排除，勿推送到公开仓库。

defaultincludes.inc

@@ -0,0 +1,35 @@
+<?php
+declare(strict_types=1);
+namespace MRBS;
+
+define ('MRBS_MIN_PHP_VERSION', '7.2.5');
+
+// Check PHP version
+// Do it now before we start including code that might fail with a syntax error,
+// for example if anonymous functions are being used.
+if (!function_exists('version_compare') || version_compare(PHP_VERSION, MRBS_MIN_PHP_VERSION) < 0)
+{
+  die("MRBS requires PHP " . MRBS_MIN_PHP_VERSION . " or above.   This server is running version " . PHP_VERSION . ".");
+}
+
+define('MRBS_ROOT',     __DIR__);                   // Root of MRBS installation
+
+// We use require for some files rather than require_once because the values that
+// are assigned to variables will change depending on the context in which the file
+// is called.
+
+require_once 'lib/autoload.inc';
+require_once 'grab_globals.inc.php';   // this must be included before mrbs_auth.inc (due to WordPress - see comment in file)
+require_once 'systemdefaults.inc.php';
+require_once 'areadefaults.inc.php';
+require_once 'config.inc.php';
+require_once 'site_config.inc';
+require_once 'internalconfig.inc.php';
+require_once 'functions_global.inc';
+require_once 'functions.inc';
+require_once 'theme.inc';
+require_once 'dbsys.inc';
+require_once 'mrbs_auth.inc';
+require_once 'init.inc';
+require_once 'upgrade.inc';
+require 'standard_vars.inc.php';