SQL Vulnerability found in a website what's written in PHP. I've got access to their accounts usernames and passwords. Which the site owner is breaking the Data Protection Act, because they're not even hashing the passwords....