SQL security holes closed for HostDao.