I Found 4 Bugs in an AI Student Platform — Here's What Was Actually Wrong

A GET endpoint inserting rows into a production database. { doubts, pagination } from an API that returned a plain array. Four separate bugs. One codebase. All found in the same sitting. This is a writeup of everything I found and fixed in DoubtDesk — an anonymous, AI-powered doubt-solving platform built for students to ask questions without fear and get instant answers. TypeScript, Next.js, Clerk auth, and a Postgres database on the backend. I'm writing this because every one of these bugs is s