HeroesForGhost

Thanks for the help, both of you. I'll UTFSE and try to figure out how to do SQL injections.

Can someone please explain to me how to locate hashes? I know how to crack a hash once I've actually found it (brute force, dictionary, etc--even morons can do it with the right software) but I'd like to know how to actually OBTAIN the hash characters themselves. An idiot friend insists I can get them just by viewing a website's source code, but either he's just kidding or is a retard. How do you actually find password hashes from a website that uses a basic username/passcode system?