def query_data2(etdfrom="2023-01-01", etdto="2023-03-31", client_name:str ="client"):
    sss = conn.table("f_statistics")
    cli = conn.table("d_client_master")

    if client_name:
        cli = cli.filter(f"client_name ilike '%{client_name}%'")  # <-- sql injection issue

    result = sss.filter("etd between ? and ?", (etdfrom, etdto)) \  # <-- for avoid sql injection issue, use parameters, but filter not support.
             .join(cli, how="inner", left_on="client_code", right_on="client_code") \
             .select("datetrunc('month', etd) as etd_month, sum(amount) as amount, count(DISTINCT order_no) as order_count") \
             .group_by("etd_month") \
             .order_by("etd_month")

    return result