Just a hint  Go to the Fix Us challenge

I believe it is hard to solve this one without any hints (it is not a common or well known bug), so here is my hint:
Check the Links, Tutorials, ...

GreetZ

The hint is still very vague...
Are you telling us we should check the links from Z for common vulnerability knowledge ?

I'm just saying that if someone who cannot solve this challenge, one of the links in the tutorials section will give some new ideas.

I don't believe anybody should check anything for common vulnerability knowledge, because everybody rulz in this topic (really!), but I know I won't be able to solve it without this hint. And maybe Gizmore neither ;P

Maybe the title is a hint too

Another hint:

To use the login form, simply use your real wechall username/password.

Now that there are multiple "tutorials" in the Tutorial section, do you mind being a slight bit more specific on the one you were referring to.

I have an idea already, but I'd like to confirm my thoughts.

I suggest you take a look at Z's profile.
He posted one link into the tutorial section that is a good read for this challenge.

Whenever someone posts a link you can also see his/her links in the profile.
It is also possible to edit and delete "your" links.

What currently is missing is something like "unaffiliate me from the link".


EDIT:

Meanwhile you can unaffiliate from your links, to make them appear anonymous.
As another hint: It's neither a bee nor a hornet

Once you have suplanted Z... what is the next step? I cannot access to the forum.php either...

The challenge might be currently a bit buggy.

As far as i can remember, it might work with the data in URLs, but does not work sent in the http headers. Maybe i find some time to fix this and make it work both ways.

Hope this helps

gizmore