work on SQL OR statements, still not quite right