My biggest issue on this particular project was an almost intentional neglect of database specifics, such as not enforcing uniqueness at the database level even for usernames. There were about 50 users that had 2 records which led to all sorts of crazy issues to track down.

Hours to days of data cleanup work that could have been bypassed by setting a simple unique index.