Is there support for runtime generated schemas?

[lattice0]

Suppose I want to SELECT some columns from an unknown schema. That is, the column names are provided at runtime. Without concatenating them with a , and getting injection vulnerabilities, is there a way to SELECT from such database securely given column names at runtime, and more precisely, an unknown number of them?

QueryBuilder does not accept arrays as arguments, so I'd have to have SELECT ?, ?, ?, ?, ? FROM ? written in advance, with the ˋ?ˋ count being how many columns I want to select, which is not very nice. I'd like to have SELECT ? FROM ? and fill the first with the column names and the second with the table name.