On: Just open sourced my 10k LOC PHP & MySQL invoicing app

[tlhunter]

This is indeed a bug:

http://neoinvoice.local/invoice/list_items/1/asdf

Does cause an erroneous query. It should use a case statement to check against column names. CI will strip out any special characters though.