username should not be used to select database