Allow Underscore char in orderBy/groupBy filter as its a legit symbol in names

Author: avbdr

MysqliDb.php

@@ -339,7 +339,7 @@ public function orderBy($orderByField, $orderbyDirection = "DESC")
     {
         $allowedDirection = Array ("ASC", "DESC");
         $orderbyDirection = strtoupper (trim ($orderbyDirection));
-        $orderByField = preg_replace ("/[^-a-z0-9\.\(\),]+/i",'', $orderByField);
+        $orderByField = preg_replace ("/[^-a-z0-9\.\(\),_]+/i",'', $orderByField);
 
         if (empty($orderbyDirection) || !in_array ($orderbyDirection, $allowedDirection))
             die ('Wrong order direction: '.$orderbyDirection);
@@ -359,7 +359,7 @@ public function orderBy($orderByField, $orderbyDirection = "DESC")
      */
     public function groupBy($groupByField)
     {
-        $groupByField = preg_replace ("/[^-a-z0-9\.\(\),]+/i",'', $groupByField);
+        $groupByField = preg_replace ("/[^-a-z0-9\.\(\),_]+/i",'', $groupByField);
 
         $this->_groupBy[] = $groupByField;
         return $this;