True. They have access to a database, why don't they use it?
Other modules I located that I have but don't use with this problem:
require_once($mainframe->getCfg( 'absolute_path' )."/administrator/components/com_akogallery/config.akogallery.php");
and several other calls...
$dhtmlfile = "administrator/js/dhtml.js";