It was showing players in-game when the server was down yesterday, and you can access any players XML file regardless whether they've enabled the profile API or not, by changing .html to .xml in the profile page.
Another slightly less serious thing, I'm not sure if this is a .htaccess fault or whether it's meant to do this, but; players profiles can be found by ID, by browsing to http://sa-mp.nl/players/<any valid ID>/.html (<any text>.html also works.)
Also: http://sa-mp.nl/online/id/asc.html brings up PHP array errors.
Another slightly less serious thing, I'm not sure if this is a .htaccess fault or whether it's meant to do this, but; players profiles can be found by ID, by browsing to http://sa-mp.nl/players/<any valid ID>/.html (<any text>.html also works.)
Also: http://sa-mp.nl/online/id/asc.html brings up PHP array errors.