@@ -1583,7 +1583,9 @@ sub _where_clause_and_param {

         if (ref $where eq 'HASH') {

             my $clause = ['and'];

+            my $column_join = '';

             for my $column (keys %$where) {

+                my $column_join .= $column_join;

                 my $table;

                 my $c;

                 if ($column =~ /(?:(.*?)\.)?(.*)/) {

@@ -1598,6 +1600,16 @@ sub _where_clause_and_param {

                   if defined $table_quote;

                 push @$clause, "$column_quote = :$column";

             }

+

+            # Check unsafety column

+            my $safety = $self->safety_character;

+            unless ($column_join =~ /^[$safety\.]+$/) {

+                for my $column (keys %$where) {

+                    croak qq{"$column" is not safety column name } . _subname

+                      unless $column =~ /^[$safety\.]+$/;

+                }

+            }

+            

             $obj = $self->where(clause => $clause, param => $where);

         }

         elsif (ref $where eq 'DBIx::Custom::Where') { $obj = $where }

@@ -28,14 +28,6 @@ sub new {

 sub to_string {

     my $self = shift;

-    # Check if column name is safety character;

-    my $safety = $self->dbi->safety_character;

-    if (ref $self->param eq 'HASH') {

-        for my $column (keys %{$self->param}) {

-            croak qq{"$column" is not safety column name (} . _subname . ")"

-              unless $column =~ /^[$safety\.]+$/;

-        }

-    }

     # Clause

     my $clause = $self->clause;

     $clause = ['and', $clause] unless ref $clause eq 'ARRAY';

@@ -50,15 +42,6 @@ sub to_string {

     $self->{_tag_parse} = $self->dbi->tag_parse;

     $self->_parse($clause, $where, $count, 'and');

-        

-    # Check safety

-    unless (join('', keys %$count) =~ /^[$self->{_safety_character}\.]+$/) {

-        for my $column (keys %$count) {

-            croak qq{"$column" is not safety column name (} . _subname . ")"

-              unless $column =~ /^[$self->{_safety_character}\.]+$/;

-        }

-    }

-

     # Stringify

     unshift @$where, 'where' if @$where;

     return join(' ', @$where);