fix: sql statement