Fix: possible sql-injection + placeholders-bug

Fixes in Translation-DB-Adapter, Config-YAML...
why we should escape these? they're hardcoded (which is very bad indeed) - it's just a "slightly better version" of the class... we should rewrite a LOT of components to allow dynamic column names (via options) etc...
imho escapeIdentifier is not needed here - not injectable.