Require a column whitelist to be specified for generated queries to prevent SQL injection