insert into sql statement with where clause