haha html u cant even manipulate html to hack anything
sql injection is the best way to bring down any business/website most php sites are run on databases, the lucky thing is the vb dev team know about md5 hashing which makes it quite impossible to do that, you need more complex programming to bring down this website but why bother??