fix SQL quotes"