use otp to protect db dump
fix check duplicate