Welcome to the home page!
You will never find the password that we've cleverly hidden in a file called password.txt, just outside the webroot..
We (hopefully) fixed the ../ issue. Now made sure that .html is always appended to the path. We are running on an old version of PHP though, but I'm sure that's fine.