SQL security holes closed for MetadataDao.