You have an error in your SQL syntax near 'where id=' at line 1