fixed the hardcoded SQL statement issue