You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '?%27javascript:void(function(){%27+encodeuricomponent(w)+%27}())%27:%27%27)+%27'' at line 1