figuring how to get my sqli to work correctly