lars
committed
on 10 Nov 03
Fixed security hole: You could pass in the name of an orderby which included [...], and it would get executed in the page's nameapace