I am fairly new to programming and would like to know if querying column names based on client input could be an issue. Basically, in the code below, I am using the inputs\'