A company I used to work for ran into some trouble when a customer attempted to change their payment information on the company's website. All attempts resulted

A company I used to work for ran into some trouble when a customer attempted to change their payment information on the company's website. All attempts resulted in a rather frightening (to the user) "Access Denied" screen. The customer's last name was "Curl."