In that case you use php code like this:
PHP Code:
$tableinfo = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "tablename WHERE userid = " . $_REQUEST['userid']);
You would change tablename to the name of the mysql table that is storing you hack's data. the * tells mysql to store (cache) each row in that table in the variable $tableinfo (which you can name this whatever you want). This way if you have a row/field named username that stores the usernames for everyone the username for $_REQUEST['userid'] would be called with $tablename['username'];
If you need anymore help let me know.