fix `UPDATE` query in `prepare()`