防止SQL tablename注入 - 到目前为止有多远？

I'm developing a relatively small application to talk to PostgreSQL, and wanted to get some feedback on how far is too far to go with regards to protecting against SQL injection.I'm developing a relatively small application t