update sql query with multiple where conditions