And two days later, their phpmyadmin is still publicly available ...