select query with dynamic where clause in sql