The database parses the statement first and fills in values later, so a value can never change the structure of the query. Table and column names cannot be parameters.
Parameterized query
A SQL statement with placeholders (`$1`) whose values are sent separately from the SQL text.