I think that the DAO should abstract more away. It shouldn't simply allow SQL input - that defeats the purpose.