Improved phrasing, hints and assignments for directory traversal attacks