What's wrong with this SQL order by?

What's wrong with this SQL order by in a search endpoint. The SQL code interpolates a user supplied sort field, enabling injection. In SQL backends this exposes data and crashes queries.

#whatswrongwiththissqlquery #sqlbug #sqlproductionbug #sqldebugging #sqldatabase #sqlcodereview #sqlperformance #sqlreliability #sqlanalytics #sqldataintegrity #sqlengineering #sqlinjection #sqlorderby #sqlquery #sqlsecurity

https://www.youtube.com/watch?v=enGz-KrHnx4

Whats wrong with this SQL order by? #sqlreliability

YouTube