Judging by what I found here:

http://msdn.microsoft.com/en-us/library/aa224033(SQL.80).aspx

I think my idea of putting brackets around the column name, and stripping out any bracket characters in user-specified column names, should work. It...