Forgot Password code: UPDATE
users
SET
pass
= '{$new_pass}' WHERE
account_id
= '{$account_id}' LIMIT 1. If your software is Software as a Service (SaaS), so multiple organizations use your software, & account_id-organization_id fields together are a unique id, & the software engineer forgets to add AND
organization_id
= '{$organization_id}' to the query, & the code passes QA when testing the Forgot Password functionality in Test environment, & code is then pushed to production, then LIMIT 1 can limit the damage done when two organizations' user's share the same account_id. —
Blue Water 11 secs ago