fix genSQLParamList so it only takes a number