add placeholder to SQL statement