Fixed escaped double-quote in build_sql_string - should be safe now.