http://www.hackthis.co.uk/ctf/8

<!DOCTYPE HTML>
<html lang = "en">
 <head>
		<title>HackThis!! - Capture the Flag</title>
		<meta charset = "UTF-8" />

<div class='level_title'>
		Level 8	</div>

<div class='nav'>
		<a href='/ctf/leaderboard'>Leaderboard</a> | <a href='/ctf/irc'>IRC</a> | <a href='/'>Normal Site</a> | <a href='?logout'>Logout</a>
	</div>

<div class='level_container'>
		<div style='font-weight: bold; margin-bottom: 4px;'>Login</div>

<form autocomplete="off" method="POST">
			<input type="text" name="user" data-holder="Username"/> 
			<input type="password" name="pass" data-holder="Password"/> 
			<input type="submit" class="submit" value="Login"/>
		</form>
		<a href='/ctf/8?register'>Register</a> | <a href='#' class='view'>View Details</a>

</div>
	<div class='level_code'>
		<a href='#' class='close'>[X]</a>
		<div class='code'>
			<code>
donkeydiver&nbsp;is&nbsp;being&nbsp;very&nbsp;abusive, but&nbsp;none&nbsp;of&nbsp;the&nbsp;admins&nbsp;are&nbsp;paying&nbsp;attention. Please&nbsp;block&nbsp;his&nbsp;account&nbsp;but&nbsp;don't&nbsp;delete&nbsp;it. &lt;?php &nbsp;&nbsp;&nbsp;&nbsp;//&nbsp;... &nbsp;&nbsp;&nbsp;&nbsp;include("user.inc"); &nbsp;&nbsp;&nbsp;&nbsp;$user&nbsp;=&nbsp;new&nbsp;user(); &nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(isset($_GET['register']))&nbsp;{ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$tmp_user&nbsp;=&nbsp;$_POST['user']; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$tmp_pass&nbsp;=&nbsp;$_POST['pass']; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$user-&gt;register($tmp_user,&nbsp;$tmp_pass); &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(isset($_GET['out']))&nbsp;{ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$user-&gt;logout(); &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(isset($_GET['login']))&nbsp;{ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$tmp_user&nbsp;=&nbsp;$_POST['user']; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$tmp_pass&nbsp;=&nbsp;$_POST['pass']; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$user-&gt;login($tmp_user,&nbsp;$tmp_pass); &nbsp;&nbsp;&nbsp;&nbsp;} &nbsp;&nbsp;&nbsp;&nbsp;$user-&gt;check(); &nbsp;&nbsp;&nbsp;&nbsp;//&nbsp;... &nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;($user-&gt;loggedIn)&nbsp;{ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;//&nbsp;... &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(isset($_GET['block'])&nbsp;&amp;&amp;&nbsp;$user-&gt;isAdmin())&nbsp;{ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;//&nbsp;... &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;} &nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;else&nbsp;{ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;//&nbsp;... &nbsp;&nbsp;&nbsp;&nbsp;} ?&gt; 

</code>		</div>
	</div>
		<script type="text/javascript">
		 var _gaq = _gaq || [];
		 _gaq.push(['_setAccount', 'UA-34026704-2']);
		 _gaq.push(['_trackPageview']);

(function() {
		 var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
		 ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'https://www') + '.google-analytics.com/ga.js';
		 var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
		 })();
		</script>
		<script src="/ctf/js/main.js"></script>
	</body>
</html>

https://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js