/actions/user/
../
name.php
password.php