Currently posts.title is regarded as a safe SQL string, but "posts"."title" (it is a result of quote_table_name("posts.title")) is regarded as an unsafe SQL string eve...