hacker.org

So do I understand this correctly: Writing to a file and storing the previous requests there is okay, but using an approach with a Session ID is not? I mean, with a real webserver you certainly would not store everything on hard disk, but use the main memory of course...

on a real application you would store the data in a database, so it would be on the disk maybe with some parts kept in memory but they can be very large. Even if you were to store everything in cookies or a session variable you would still have to get these variables from somewhere, i.e. a database so databases are taken for granted with web development

Fun fact: I 'solved' this one by randomly replying yes/no (after I found out it was a single static test), and I got it on the second try. Heh.

Could've easily done it with a text file 'memory' of course, but meh.

Would've been more fun if there would've been some trick to it, like spaces added, or a 'garbage variable name' check, that kind of thing.