Messages for processing a database are protected during a termination and restart. An in-process message queue is coupled to a message reader and receives a copy of each read input message. A completion response detector monitors a valid completion response message to each read input message, and, upon detecting the valid completion response message, deletes the copied input message from the in-process message queue. Upon a termination and restart, a startup processor operates the message reader to read the input messages in the in-process message queue, and deletes the copied input message from the in-process message queue. The deletion thereby prevents any re-accessing of the copied input message upon a second restart, preventing a loop. The ease of termination and restart allows a special restart of the affected process of the database, rather than a system-wide termination and reboot.