Fixed non-escaped sql