database error will not leak