private function escape_column_name($column_names){
        $columns = [];
        foreach( explode(',', $column_names) as $column_name ){
            // trim
            $column_name = trim($column_name);
            // Remove special chars
            $columns[] = preg_replace('/[`\'";\n\r\\\\\\0]/u', '', $column_name);
        }
        return implode(', ', $columns);
    }