HackTheSite Basic 3

This one I had to think a little longer than usual. When out of options, look at the source code and search for "password" keyword.

Since Sam forgot to upload the password, I tried accessing password.php directly.
And that gave me the answer.