some security in orderBy
some security in where()
some security in where()
working on asArray()