Changed single quotes to double quotes to prevent injection