remove superfluous round brackets

fix a SQL injection vulnerability