unforum

[Wishi-san]

Even with the PHP file location you won't be able to do anything Bidvision. The PHP is preprocessed on the server and so you will have no access to the code itself.

If there was a way to exploit the script to get it to mess up and output its own code, the very fact that it's being spoke about here and then someone just happens to get the answer right directly after, makes me think Stella would do something, ie. not give out the prize.

[Slowzone]

I don't think Stella will disqualify a person for beeing creative with the provided content. I mean: As long as we don't do anything illegal like hacking their server we're safe right?

So Meak, what tool do you use to decompile the flash files?
I'm very interested in the actual code. Maybe I can create the PHP file we need...

Cheers, Slowzone

[Bidvision]

If I have the URL of the php app, I can download it and view the code. The php isn't preprocessed, the php parses the code and produces an HTML document for the internet browser to display. Hence you can't see any useful code in the output, which is what makes php nice and secure.

However, if you can read the php code itself, it often gives vital clues.

[Wishi-san]

[Bidvision]

Well has anyone got another idea?

[Wishi-san]

Sit and pray for inspiration? Nope? I'm out.

[Bidvision]

This game needs to come up with something great in the next few days or else it will have the opposite effect for Stella Artois than the one they intended.

[Eddie Nichols]

Reassuringly lame.

[Meak]

the PHP file is here

http://sableshuck.com/finFinalCheck.php

you can download it using telnet (click start menu... run... then type telnet... once open type 'o http://www.sableshuck.com/finFinalCheck.php')

the flash file is here
http://sableshuck.com/acquisition/0205/conclusion/dd5c3cea2ed02366b.swf

the code in the flash file is in the attachment

just in case anyone wants to try something, not that i'm suggesting you do.

[suraimu]

[trevdak]

Can any of you flash decoding people tell me what the names of the variables being sent to the php script are?

[Meak]

they are

'id' - the id of the symbol
'pos' - the position of the symbol
'value' - the value we assign them

[Eddie Nichols]

Correct me if I'm wrong, but if there are only three variables (id, pos, and value), then the rotation of the symbols doesn't matter?

[Wishi-san]

What the Flash file sends to the PHP is this:

submit=submit
userID=base64 encoded user number
finFive=0|0|0
finFour=0|0|0
finThree=0|0|0
finTwo=0|0|0
finOne=0|0|0
finZero=0|0|0

3 numbers for each image. The first number is the order you've chosen, the second is the rotation, the third is the number which you have assigned to that image.

Not that this will help as you'll still need the answer. To a properly formatted query, the PHP replies with:

status=error_message
message=Your+recommendations+are+not+correct.
+Return+to+the+beginning.

If you were to get it right, the message would most probably contain the phone number or link to where you can get it.

Edit: And I've just tested that the phone number is not hidden somewhere in the SWF by returning the status=ok message the flash file expects for the correct answer. As I presumed, all it does is display whatever message you are given and not give you the choice to start again.

So since this post is mainly screwing the hopes of getting the answer out of the PHP script, all I can think is that promo video keeps coming back to me. It seems to have no point, why show a promo to us so close to the end, why send it to others at the final puzzle? Maybe that's all it is, but it is a strange video and those overlaid faded images just look very odd. But then maybe I see clues everywhere now

[Meak]