Indeed. I'm sure you know nothing about hacking. ^_^
First off, you need someone's IP to do any real damage. What sux for you is that on almost any forum out there, you need Admin privileges to see IP addresses.
Second, if you're saying that you'll either attempt to find an SQL injection...