fix sql with bindvalue