Either SQLHelper::sanitiseBindName() or add a new sanitiser for this purpose.
SQLHelper::sanitiseBindName()