fix wrong SQL and escape < and >