+escape columns in UPDATE