MRBS 1.12.2 等保2.0二级整改完整提交

包含：登录失败锁定、90天密码有效期、30分钟会话超时、
强制改密、登录审计日志、屏幕水印、企业背景图、
备案信息固定底部、favicon、JS空集合保护、
会话过期体验优化（403 JSON）、display_errors 关闭、
固定 key 根治 Integrity check failed 等全部改动

注意：config.inc.php/.htaccess/.user.ini 含敏感信息，
通过 .gitignore 排除，勿推送到公开仓库。

lib/MRBS/Joomla/JUser.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace MRBS\Joomla;
+
+class JUser extends \JUser {
+
+  // NOTE:  In some versions of Joomla!, JUser::getAuthorisedGroups() seems to reset the
+  // timezone to the user's Joomla timezone, which may be different from the MRBS timezone, so
+  // we have to get the timezone before calling it and restore it afterwards.
+  // (This doesn't seem to happen in Joomla 5. It may also be OK in some earlier versions.)
+  public function getAuthorisedGroups()
+  {
+    $tz = date_default_timezone_get();
+    $result = parent::getAuthorisedGroups();
+    date_default_timezone_set($tz);
+    return $result;
+  }
+
+  // Not sure whether getAuthorisedViewLevels() has the same problem, but just in case ...
+  public function getAuthorisedViewLevels()
+  {
+    $tz = date_default_timezone_get();
+    $result = parent::getAuthorisedViewLevels();
+    date_default_timezone_set($tz);
+    return $result;
+  }
+}