added quotes in db queries

added quotes in db queries