Crapazon's seller portal has a login form that talks directly to the database. No sanitisation, no prepared statements — just raw SQL.
