Merge pull request #167 from jpmarques/master

Escape column names

Dapper.Rainbow/Database.cs

@@ -56,7 +56,7 @@ public string TableName
                 List<string> paramNames = GetParamNames(o);
                 paramNames.Remove("Id");
 
-                string cols = string.Join(",", paramNames);
+                string cols = string.Join(",", paramNames.Select(p => "[" + p + "]"));
                 string cols_params = string.Join(",", paramNames.Select(p => "@" + p));
                 var sql = "set nocount on insert " + TableName + " (" + cols + ") values (" + cols_params + ") select cast(scope_identity() as int)";
 
@@ -75,7 +75,7 @@ public int Update(TId id, dynamic data)
 
                 var builder = new StringBuilder();
                 builder.Append("update ").Append(TableName).Append(" set ");
-                builder.AppendLine(string.Join(",", paramNames.Where(n => n != "Id").Select(p => p + "= @" + p)));
+                builder.AppendLine(string.Join(",", paramNames.Where(n => n != "Id").Select(p =>  "[" + p + "] = @" + p)));
                 builder.Append("where Id = @Id");
 
                 DynamicParameters parameters = new DynamicParameters(data);

Dapper.Rainbow/SqlCompactDatabase.cs

@@ -25,7 +25,7 @@ public SqlCompactTable(Database<TDatabase> database, string likelyTableName)
                 List<string> paramNames = GetParamNames(o);
                 paramNames.Remove("Id");
 
-                string cols = string.Join(",", paramNames);
+                string cols = string.Join(",", paramNames.Select(p => "[" + p + "]"));
                 string cols_params = string.Join(",", paramNames.Select(p => "@" + p));
 
                 var sql = "insert " + TableName + " (" + cols + ") values (" + cols_params + ")";