Properly escape column name in "createFunction" call

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

1 files changed, 3 insertions, 3 deletions

diff --git a/lib/Categories/Stats.php b/lib/Categories/Stats.php
index 41e49bd..dd0fc1b 100644
--- a/lib/Categories/Stats.php
+++ b/lib/Categories/Stats.php
@@ -125,11 +125,11 @@ class Stats implements ICategory {
 	 * @return int
 	 */
 	protected function countEntries($tableName, $column = '*') {
+		$query = $this->connection->getQueryBuilder();
+
 		if ($column !== '*') {
-			$column = 'DISTINCT(' . $column . ')';
+			$column = 'DISTINCT(' . $query->getColumnName($column ) . ')';
 		}
-
-		$query = $this->connection->getQueryBuilder();
 		$query->selectAlias($query->createFunction('COUNT(' . $column . ')'), 'num_entries')
 			->from($tableName);
 		$result = $query->execute();