Right, but not in that function I think. Looks like you're using username and password only on the query on the "def exploit" method, not here, right?