1. 0
2. I can not access blog.php. I keep getting redirected to home.php instead.
3. I got access to the super secret blog while using the password "thepassword"
4. Changing the value to 1 allowed me to acces the super secret blog without having to input the password.
5. The cookie value was still set to 1 after clicking the cool website that turned out to be something fake?
6.a) After inputing the comment <h1> comment </h1> the comment section appeared exactly as I had inputted it.
  b) The same thing as above happened where <script> alert('css') </script> was outputted as a comment
7. Users would be able to access the sensitive information 
8. Never trust the user always sanatie the data