You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'ordno = '37bcb10b9813dc3b2e161439d8e86f2c'' at line 1