QUOTE(djbob @ Aug 19 2006, 02:58 PM)
Yah, but I gave the fixes to Lappy. There's still a few SQL injection exploits I could abuse... I could get Lappy's password that way, actually. Muwahahaha

I've toyed around with a few exploits. One has to do with getting a persons password-hash and then making a cookie out of it... wouldnt do it here though.