If your string is in format "YYYY-MM-DD" you don't really need to convert it to date. Just precede it by the DATE literal and you are set.
Have a look at this question, we had discussed it at some length
The rest is text parsing (make sure to print / browser() the query string and test it in your favorite DB tool).
