There's a pretty obvious flaw in their implementation that makes them vuln to LFI. So this can be done. serious about the 2k?