added data binding to sql query