Not exactly sure how forgivable this is. But yes, unit testing and writing a few negative scenarios would have caught this problem early on.