get the directory we are installing into when adding the avatar images to database

dvwa/includes/DBMS/MySQL.php

@@ -47,7 +47,8 @@ dvwaMessagePush( "'users' table was created." );
 
 
 // Insert some data into users
-$avatarUrl  = '/hackable/users/';
+$base_dir= str_replace ("setup.php", "", $_SERVER['SCRIPT_NAME']);
+$avatarUrl  = $base_dir . 'hackable/users/';
 
 $insert = "INSERT INTO users VALUES
 	('1','admin','admin','admin',MD5('password'),'{$avatarUrl}admin.jpg', NOW(), '0'),