Clean My SQL

Replace SQL in concatenated string to clean SQL syntax.

Replace Concatenated Variable with :