Pass msq payload to SQL query where clause

The "better" way is to use "Parameters"