These are not credentials, use a better variable name. `$user`?