how to fix sql query syntax error