I noticed before when trying to write the command line script that if the posted variables were blank, then giving a script along the lines of this to HFS would result in the VFS and its backup being completely erased. Going to any page in a browser always resulted in the 404-Not Found page.
{.mkdir|D:\.}
{.add folder|real|D:\|..}
{.new account||password=|enabled=true|member of=can change password|redirect=//.}
{.set item||hide=1|access=|delete=|upload=.}