Can someone PM me for a nudge, I’ve found the exploit and edited it to aim at the webserver. I’ve uploaded a file which claims is not allowed but looking at the application’s source code, this shouldn’t be a problem. My local time and the server’s time are in sync. Still failing however.