1. fix sql syntax bug (multi WHERE)