- disallow ` in table names when using ?? placeholder in query

Author: Marius Cramer

interface/lib/classes/db_mysql.inc.php

@@ -126,7 +126,8 @@ public function _build_query_string($sQuery = '') {
 
 				if($iPos2 !== false && ($iPos === false || $iPos2 <= $iPos)) {
 					$sTxt = $this->escape($sValue);
-
+					
+					$sTxt = str_replace('`', '', $sTxt);
 					if(strpos($sTxt, '.') !== false) $sTxt = preg_replace('/^(.+)\.(.+)$/', '`$1`.`$2`', $sTxt);
 					else $sTxt = '`' . $sTxt . '`';