use correct quoting-character in sql-query

Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>