abstract dao update sql injection fix
abstract dao update sql injection fix