changing the quotes in a controller sql request