Fix SQL error

AND operator was missing from WHERE clause