fixing slashes sql criteria