Added simple SQL Injection avoidance in DAOs