security still without database