Col( string ) must not accept quotes #1
Description
Col(`id", (DELETE FROM foo) AS "bar`)
// becomes
SELECT "id", (DELETE FROM foo) AS "bar" FROM ...
sql injection should be avoided by matching col name against regexp
{{ message }}
Col(`id", (DELETE FROM foo) AS "bar`)
// becomes
SELECT "id", (DELETE FROM foo) AS "bar" FROM ...
sql injection should be avoided by matching col name against regexp