use python string formatting for sql statement