Removed quotes on input parameter since ORDER BY requires an identifier
and not a string literal.