PHP often has access to a DB API in order to run the site; that's where the fun starts even if you are restricted to PHP's access level.