sql quotes fix