Cracking

I got stuck with the loop in _auth function I can’t find the way to rewrite the pass when " % " appear and need a hint thankyou !