g1smd - 9:03 am on Jul 4, 2013 (gmt 0)
Your "friendly" URLs aren't all that, uhh, friendly. You don't need "product.php" in the URL and the "fake" folder levels could be an issue.
That's a more friendly URL!
this is the format the server needs it
You do realise that the product name part of the friendly URL request isn't being passed on? If the CMS is not checking that the requested product name is valid for this particular product number you have an infinite duplicate content problem. You also leave your site open to malicious