realistic mission 15,16

what i've learnt today are:
- read source code carefully
- unzip zipped file with password without password with pkcrack
- $$var =>$($var)
- override php variable with post and get