You cannot hack mpgh at its current state, its nearly next to impossible, all this webpage is doing is requesting. All the server is doing is denying or allowing. With this process to makes it unhackable. Having access to the database or accessing the database through a administration only webapge is not hacking.