bugfix: do not permit order/limit clauses in update/insert SQL statements