Mine was about three years old. I missed an “&” in a query constructor. The way the constructor worked, this was no issue. But that was because of another bug that assumed it was there. One day I fixed that bug. Then the query to get the user’s account didn’t have the whole “& username=“ part and now just returned the first user… admin. So everyone who logged in was admin for about twenty minutes. Had to immediately take the whole system down.