Put ordering directly in SQL query.

Specifying the ordering using a bound parameter doesn't error, but
neither does it work. It is ordering by the string provided as if it
were a value, not the column wanted.