If anyone is interested, here's a version of the hack that calls on the user's mail client to do the sending
Code:
<?php
require("global.php");
$username=$QUERY_STRING;
$username=urldecode($username);
$user=$DB_site->query_first("SELECT userid FROM user WHERE username='".addslashes($username)."'");
$userid=$user[userid];
// display user info
$userinfo=$DB_site->query_first("SELECT email FROM user WHERE userid = $userid");
$mememail=$userinfo[email];
$mailto="mailto:$mememail";
header("Location:$mailto");
?>
Just put that into a file (e.g membermail.php) and call on it in the templates using the form membermail.php?$username
Hope that's useful to anyone...