use single-tick for SQL literal stirngs

MySQL is not SQLite.