Missing single quote in UPDATE query