FORGOT TO PUT THE ? IN THE QUERY STATEMENT