I'm stuck here too. I understand what happens after you make a username. I found out how to exploit that too, so we can change directories. Now, what we put into the user panel page appears on the page we couldn't change as a regular user. I'm not sure what I change auth_page to. Also, would I type what I want to change in those fields, or do it in the URL. I see two flash logins, a smaller one and a bigger one, plus another admin page. I'm trying to read posts and that article for help and am sinking into more confusion.