i'd say the guy simply had connection issues, was filling in a part not programmed on the server (like a certain part in the acount creation process) he might've used a anonymizer like Kproxy, he could do all kinds of stuff, but you dont need to be on the site to hack it, so i doubt he was doing that...