A page process catches every database exception and reports a generic success message. What should be changed?

1. Delete all exception handlers and assume every error is harmless
2. Include database passwords in the success message for diagnosis
3. Handle expected errors appropriately and report failure without exposing sensitive internals
4. Commit partial changes after every caught exception