update where in sql.query