[qnd]

Plus the password they need is in the config.php file.

Same username as their user (and what is put into those staff php files) but they need that password from the config.php to get into the panels.