SQL injection fix
Merge pull request #1 from robert-h-curry/sort-field-sqli

SQL injection fix