They may want to change their DB username and password ASAP.

http://blog.urfix.com/wp-config.php

I can see their config in plain text.