MySQL ActiveRecord - Protected identifier issue when updating?

[eluser]WanWizard[/eluser]
Very strange.

If you go to our demo site, http://exitecms8.exitecms.org, and click open the profiler at the bottom, you'll see that all queries are properly escaped. And that's standard CI (1.7.2, but 2.0 behaves the same).

I just went through the code again, and I can't see how you would get passed escaping column names. No change made to the property _protect_identifiers? Not using an old version of CI? Or a modified core? No strange libraries overloading the database classes?