Help folks.

[VeseliTigar]

Hy i am new to the hackthissite.org. I am having one problem, so i would realy appreciate help.
Okay i am trying to find bug on one site. www.dernek.ba .
So i find out that they have script otvori(eng: open)=filename.php. They use include function to open file you enter in open.
I tried to get include my file from my server. But if i type "/" slash they block it. I tried inputing html special chars code
for the slash but that doesn't give any result too. So i would realy appreciate help. They too add extension .php on the end
of anything you type in open.

If you wana try here's url : http://dernek.ba/?otvori=input your code here.

Thanx.

[Skiddie Killer]

HTS doesn't support illegal activities.
Pozdrav!

[Bren2010]

You're kidding! That's so freaking easy it's funny. But alas, HTS does not support illegal activities.

[sanddbox]

Actually, they don't add .php at the end, as you can tell from here.

[Bren2010]

Actually they do, as you can see from here. It's an .htaccess trick I used to use all the time.

[sanddbox]

You're right. My bad xD

@OP: I really shouldn't help you, but you might as well know not to bother with null byte injection as they're only using PHP.

[Bren2010]

I already tried it. It doesn't work. I have no effing idea why though.

[insomaniacal]

Regardless, I need to lock this, it's a clear violation of the rules. No warn this time, but please read the rules before posting.

Thanks.