change the bad sql query select *