Use Variable In String Sql Query To Find