I had one client who needed me to do a few "tweaks" because the format of the data in a nightly import had changed. I go into the app and see that their admin interface is totally, completely non-authenticated. No logins, nada.

On top of that, their automated process for refreshing the data involved completely dropping the tables and recreating them. Going to the website during this process resulted in tons of PHP errors being displayed.

I didn't have time to even begin to fix this stuff, but told the guy that he would need to find someone else ASAP.