This is true. I worked at a company and they had a SQL Storage Procedure that had a bug the developer couldn't solve, so they fixed it by canceling out the bug which introduced new problems. 3,000 lines of SQL mess all because someone walked up to the bartender and asked where the bathroom was. The Pakistani developed website was even worse as the search allowed for SQL injection. Hello, Little Bobby Tables...