How susceptible is dao objects to sql injection and what measures would be suggested to prevent sql injection if it is possible with dao objects.