Merge pull request #487 from narfbg/ci-issue-82

Escape WHERE clause field names in the DB update_string() method (Issue #82)