Create account -> Login -> http://domain/?account -> in 'Type the name' field: `../../../index.php?` Then sniff the response, so you can see the source!