might accidentally tip off an attacker about internal state, such as whether a username is
valid or not.
In the context of SQL Injection, error messages revealing the structure of a SQL query
can help attackers tailor successful attack strings.