It appears this section of code isn't the problem. I finally discovered that the data that was sent through was malformed due to some extra ticks, the "do" solution removed those ticks (and then the sql query was properly formed).