use query bindings instead of sprintf()

Author: oleg1540

system/Database/Forge.php

@@ -279,8 +279,8 @@ private function databaseExists(string $dbName): bool
 
 			return false;
 		}
-		
-		return $this->db->query(sprintf($this->checkDatabaseExistStr, $this->db->escape($dbName)))->getRow() !== null;
+
+		return $this->db->query($this->checkDatabaseExistStr, $dbName)->getRow() !== null;
 	}
 
 	//--------------------------------------------------------------------

system/Database/Postgre/Forge.php

@@ -49,7 +49,7 @@ class Forge extends \CodeIgniter\Database\Forge
      *
      * @var string
      */
-	protected $checkDatabaseExistStr = 'SELECT 1 FROM pg_database WHERE datname = %s';
+	protected $checkDatabaseExistStr = 'SELECT 1 FROM pg_database WHERE datname = ?';
 
 	/**
 	 * DROP CONSTRAINT statement