updating Query so that it accepts user input arguments

This seems to have just been an incomplete string concat.