From 5a3d2aedc5b043e7f68c73755ea9fdbee924d537 Mon Sep 17 00:00:00 2001
From: Yuri Kuznetsov <yurak@list.ru>
Date: Mon, 31 Mar 2014 15:50:39 +0300
Subject: [PATCH] escape field names in insert qury

---
 application/Espo/ORM/DB/Mapper.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/application/Espo/ORM/DB/Mapper.php b/application/Espo/ORM/DB/Mapper.php
index 3b245ad923..9d5e940086 100644
--- a/application/Espo/ORM/DB/Mapper.php
+++ b/application/Espo/ORM/DB/Mapper.php
@@ -753,7 +753,7 @@ abstract class Mapper implements IMapper
 			$fieldArr[] = $this->toDb($field);			
 			$valArr[] = $this->quote($value);			
 		}		
-		$fieldsPart = implode(", ", $fieldArr);
+		$fieldsPart = "`" . implode("`, `", $fieldArr) . "`";
 		$valuesPart = implode(", ", $valArr);
 		
 		$sql = $this->composeInsertQuery($this->toDb($entity->getEntityName()), $fieldsPart, $valuesPart);