Please ask questions ONLY in this topic.

[conscience]

You can even give your poem a name of "your" choice.

You can even give your poem a "name" of your choice.

BTW, excellent hint

[Slahd]

Okay, so I just solved it and I'm at a complete loss. I read through the thread and read up on Directory Traversal. Unfortunately, it all confuses me so much. So I would appreciate it if someone who does have an understand come PM me and explain the solution to me. I do have some kind of idea, but really, I'm grasping at straws here.
Thank you.

[conscience]

Okay, so I just solved it and I'm at a complete loss. I read through the thread and read up on Directory Traversal. Unfortunately, it all confuses me so much. So I would appreciate it if someone who does have an understand come PM me and explain the solution to me. I do have some kind of idea, but really, I'm grasping at straws here.
Thank you.

Directory traversal is about referencing a directory other than the current working dir (I assume you're familiar with the concept of current/working directory), so you can, for example, detour a file write operation . Hope this helps.

[Specktre]

Hah, after five days, I've finally completed it! Here's a hint: you need to be very specific about where you place the directory traversal commands, make sure to try all the possibilities!

[Slahd]

Based on what Monica seems to say, I'll condense the hints.

1. Read up on Directory Traversal. No seriously, Google it and stuff. If it gives you a headache, read about it sentence by sentence. And make sure you understand what's being said.
2. Know where to place the command. Where can you put the thing necessary to complete the mission?
3. Know what you want to do. How are you gonna do it? (Refer to hint 1)
4. When putting in your command, know how to phrase it. Sometimes, something smaller is more effective.
5. Know the difference between a .html file. And a .txt file
6. Think of how your computer stores files. It's a great analogy that works for this mission.
7. What's the difference between new and old? (Mysterious... Hmm...)

There. I hope none of these are too spoilerish. I don't mean to ruin it for anyone, just making this simple enough that an 11 year old should understand.

[prasoon2211]

Arghh....I wasted a whole afternoon trying out ssi and sql injections to no end. Then I came to the forum and got to read the content of the website carefully. Silly me, sql isn't even being used here. Seriously - I was going crazy thinking about how is it even possible to change contents of a file using sql And then I read the contents of the website to know that the script is actually saving the files - not writing them to a db or anything
Anyway, to those who have not been able to figure it out yet, I guess you should see how PHP handles file.

[NyteSniper]

It's really not as hard as it SEEMS, and directory traversal is everything on this one. Just think about how you would move around on the box and NEXT think about what you need to replace. Don't over think like I was lol

*Hope I'm obscure enough*

[MRFREE]

Uhm I got a page that told me I was a weirdo. Thats not true right?

[LoGiCaL__]

Uhm I got a page that told me I was a weirdo. Thats not true right?

Usually those pages are pretty accurate. So I think it's safe to say it's spot on.

[DadMonster]

Once I *finally* stumbled onto the answer, I started trying to find out who hacked the site. I tried creating an html file on the site with an SSI to list the directory, but just get one of the page not found errors. Can I assume that's not supported on the HTS but would work on a real world site? It would be cool if it worked here...
thanks for the great site!