[tools] added back ticks to avoid sql error on table names with "-"

[ridz1208]

This pull request adds backticks where backticks should be added

before:

UPDATE ccna_laptop.Clinical_Biosamples_CBSR SET Date_taken=NULL, Testdate=Testdate WHERE CAST(Date_taken AS CHAR(20))='0000-00-00';

after

UPDATE `ccna_laptop`.`Clinical_Biosamples_CBSR` SET `Date_taken`=NULL, `Testdate`=Testdate WHERE CAST(`Date_taken` AS CHAR(20))='0000-00-00';

[driusan]

These escapes should all be changed to use the $db->escape function, which is more robust than hardcoding the '`' and centralizes where the logic lives..