Before starting work in Bitrix Framework you have to understand the main rules that will help you to avoid many mistakes:
he files that cannot be accessed directly (they must not be executed by direct access using an address in the browser) must contain the following verification code in the beginning:
<?if(!defined("B_PROLOG_INCLUDED") || B_PROLOG_INCLUDED!==true)die();?>
These files include all the files that operate inside the product, e.g. website templates, component templates, files .parameters.php and .description.php.