SELECT `url` FROM sa_access_code WHERE `merchantID`= AND `areaID`= AND `code`=''; is an "invalid query"