Hardcoded admin creds should've gone extinct with Flash-based websites, but here we are