added some things I tried for the 4th vulnerability (but didn't work)