[Vince]

Forums, if not kept up-to-date are easily exploitable because all the information you will need is available on the Internet. SA-MP servers being "hacked" is usually caused by poor coding. Forgetting to (re)set a variable, not sanitizing user input, etc.

Very simple SQL exploit example:

PHP Code:

select * from player where name = '%s' and password = sha1('%s') 


If the password isn't escaped and I write this in the password box:

Code:

bla') union select * from player where id = 1 order by id --

The query would become:

PHP Code:

select * from player where name = 'Me' and password = sha1('bla') union select * from player where id = 1 order by id --') 


Then the data of that user would probably get assigned to me and I'd have full admin rights.