I don't mean to be rude but did you even read my post cause i wrote index.php?page=.../etc/passwd\0 not index.php?page=/etc/passwd and even with permitions the script that's viewing it now the group so permitions don't effect it... What you said index.php?act=more%20/etc/passwd\0 wouldn't do anything at all since there is no act variable in the script, and even if you meant page= not act= it would just try to find "more /etc/passwd" and you would get a 404 since %20 is a space :x