Dao fix (prepareQuery & String protection)