MTiger156 -- Been playing around with the API's i was able to dig up in the javascript. Seems there's more to it than just forcing parameter values. Security pretty tight up in here.
[05:57 pm]
NudeRaider -- tbh thats the most likely way people got told it
[03:43 pm]
Suicidal Insanity -- Why would the FTP password be in the SQL DB? Unless somebody sent it via PM :X