FROM ' . SESSIONS_TABLE ."
    WHERE session_id = '" . $this->db->sql_escape($session_id) . "'";

Please