privatize db connection (security issue)