It's a PHP site accessing some kind of SQL backend. Theoretically it should be easy to remove the "where" function while retaining the ability to see "who". Or both.
Actually, both of them should be 25 minute hacks.
But I quite like seeing who's online, as I don't want to log in to see if my merchant is up.