A race between user_delete() and a post being submitted by the user being deleted can leave a post whose poster_id matches no row in the users table. A posting request that loaded the user’s session before the deletion committed can still insert its post afterwards, with the old poster_id. There are no foreign keys to prevent this.