use sqlite3_mprintf() fuction instead of sprintf