Hint 2 Look at the URL that the about page is being served from. Try to break out of the public folder.
