back-sql quote characters in query