Must review sql statements