Missing \ in sql query