Web page security

There is a nice real word "tutorial" available how NOT to secure your websites. On this site you can test your skills of breaking into some access restricted web page. There are 16 levels to master, the final one is against the Apache authentication (guess how far I got ).
Good fun and an eye opener for fans of security by obscurity.