got stabbed by sql syntax