update sqlOrderBy

* Remove columns, now use ```sanitize``` to... sanitize.
* Fix bug about sortRule.attr concatenation