db->update() sucks for complicated where clauses