Another server error? It seems like the SQL table field isn't called email. Sometimes hacking involves guesswork.

Use the statement from before and replace email with other plausible names until you get a couldn't-find-user error.