While the customer got a 100% fulfillment on the “Ask a Password” feature, the “Directory Listing” feature was delivered for free. One of the OWASP Top Ten 2007.