SQL security holes closed for UploadDao.