Your staff login page is showing under certain condidions - I just wanted to go to "Discussion" from a thread in "artwork" and the link on top had a certain php script included in the url.

Not that anyone would get any use out of that without login data, but that's not the way such maintenance/administration page should be reachable.