#210219 follow by myself: update_sql() does not support placeholders, so we should compose our own SQL ourselfs
