What did you expect from the equivalent of "SELECT 'case_header', ..." ?

Ensure $index can only contain a valid and allowed column name and use prepare( "SELECT $index, ...