fixed bug: wrong sql, missing double-quote on string field