use safe query

go-pg · Jul 8, 2024 · 5a1d685 · 5a1d685
1 parent 3c0cf3a
commit 5a1d685
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/orm/query.go b/orm/query.go
@@ -366,7 +366,7 @@ func (q *Query) AppendColumn(columns ...string) *Query {
 	t := q.tableModel.Table()
 	if q.columns == nil {
 		for _, f := range t.Fields {
-			q.columns = append(q.columns, fieldAppender{fmt.Sprintf("%s.%s", t.Alias, f.SQLName)})
+			q.columns = append(q.columns, SafeQuery("?.?", t.Alias, f.Column))
 		}
 	}
 	return q.Column(columns...)
@@ -378,7 +378,7 @@ func (q *Query) AppendColumnExpr(expr string, params ...interface{}) *Query {
 	t := q.tableModel.Table()
 	if q.columns == nil {
 		for _, f := range t.Fields {
-			q.columns = append(q.columns, fieldAppender{fmt.Sprintf("%s.%s", t.Alias, f.SQLName)})
+			q.columns = append(q.columns, SafeQuery("?.?", t.Alias, f.Column))
 		}
 	}
 	return q.ColumnExpr(expr, params...)