hmm well if i were to hack a site.. i would normally check the CGI for flaws or holes..
and when u refer to "hacking a website" what do u mean by that?
did your friend accessed the server's files? or he got inside through the login page with out logging in?..
