fix SQL quotes