quote the sqls