add order by and solve sql injection