for the sign-in, registration, password-reset and invitation // pages. Visitors here are not signed in, so they get only what these pages use: // jQuery, Bootstrap, bootbox, the loading overlay, the theme CSS and // ajax_core.js — not custom.js (every feature's API URLs), the template bundle, // charts, the scanner or the export libraries that include_header.php loads. if (ob_get_level() === 0) { ob_start(); } ini_set('display_errors', '0'); ini_set('log_errors', '1'); require_once __DIR__ . '/../assets/utils/timezone.php'; require_once __DIR__ . '/../assets/utils/page_headers.php'; send_page_security_headers(); $vendor_url = $server_url . 'assets/vendor/'; ?>