SQL security holes closed for FacilityDao.