quote tablename in sql statements to allow special chars