fix sql quotation of identifiers

# Conflicts:
#	Services/Database/classes/PDO/class.ilDBPdo.php

Services/Database/classes/PDO/class.ilDBPdo.php

@@ -1,6 +1,5 @@
 <?php
 
-declare(strict_types=1);
 /**
  * This file is part of ILIAS, a powerful learning management system
  * published by ILIAS open source e-Learning e.V.
@@ -17,6 +16,7 @@
  *
  *********************************************************************/
 
+declare(strict_types=1);
 /**
  * Class pdoDB
  * @author Oskar Truffer <[email protected]>
@@ -500,13 +500,13 @@ public function update(string $table_name, array $columns, array $where): int
             $q = "UPDATE " . $this->quoteIdentifier($table_name) . " SET ";
             $lim = "";
             foreach ($fields as $k => $field) {
-                $q .= $lim . $field . " = " . $placeholders_full[$k];
+                $q .= $lim . $this->quoteIdentifier($field) . " = " . $placeholders_full[$k];
                 $lim = ", ";
             }
             $q .= " WHERE ";
             $lim = "";
             foreach ($where as $k => $col) {
-                $q .= $lim . $k . " = " . $this->quote($col[1], $col[0]);
+                $q .= $lim . $this->quoteIdentifier($k) . " = " . $this->quote($col[1], $col[0]);
                 $lim = " AND ";
             }
 
@@ -531,7 +531,7 @@ public function update(string $table_name, array $columns, array $where): int
             $q .= " WHERE ";
             $lim = "";
             foreach (array_keys($where) as $k) {
-                $q .= $lim . $k . " = %s";
+                $q .= $lim . $this->quoteIdentifier($k) . " = %s";
                 $lim = " AND ";
             }
 
@@ -846,7 +846,7 @@ public function replace(string $table, array $primary_keys, array $other_columns
         $values = [];
 
         foreach ($a_columns as $k => $col) {
-            $fields[] = $k;
+            $fields[] = $this->quoteIdentifier($k);
             $placeholders[] = "%s";
             $placeholders2[] = ":$k";
             $types[] = $col[0];