All credentials and settings are stored securely in your MySQL database — nothing is hardcoded in any file.