The site admin likes to post his code everywhere so check the Code Bank of HBH for the code. You'll find a custom encryption code.

Use a dictionary attack to match the checksum on the site. The password is 'atheism'.

Once you're logged in, pass the variable &auth=true for the admin login page. This is the usual register globals trick. You should be able to modify the site contents and gain your points.