id summary reporter owner description type status component version severity resolution keywords cc stage has_patch needs_docs needs_tests needs_better_patch easy ui_ux 6428 database api order_by() doesn't work with dynamic column names if order by descending anonymous nobody "When the order by column name is passed in as a variable, the API doesn't parse the sorting column name, but take it as a whole, including the ""-"" sign. e.g. sortColumn = ""-"" + request.GET['sortColumn'] print sortColumn #e.g. sortColumn='-type' myObj = DBObj.objects.all().order_by(sortColumn) The following SQL is generated, and create an exception SELECT ... FROM ... ORDER_BY ""mytable"".""-type"" " closed Database layer (models, ORM) 0.96 invalid order_by Unreviewed 0 0 0 0 0 0