quoteIdentifier function
Quotes one physical identifier; arbitrary values must always be bound.
Implementation
String quoteIdentifier(String name) {
if (name.isEmpty || name.contains('\u0000')) {
throw ArgumentError('Invalid SQL identifier');
}
return '"${name.replaceAll('"', '""')}"';
}