lol... you didn't hack boy. anyone with a little SQL knowledge can pull a SQL injection. pretty much all you did was call the table from the database... you didn't change/alter/delete anything but i guess if you wanted to drop the entire user table or even better, steal ppl cookies using XSS then logining in as them and transfering money :) its definitely possible to do but i rather not end up in jail.
anyways, just a little fun:
Code:
https://hennepintech.ims.mnscu.edu/frame.asp?pg=javascript:alert('brownsta hacks!');
^XSS vulnerable also, meaning you could steal ppl's logins and mess up their schedules :)...
^^not working from the link, copy and paste and it will work.