[solved] using Ditto config - how to secure $_GET

<?php
$myOrder = 'createdon DESC';
if ($_GET['order'] == 'down') {
  $myOrder = 'createdon DESC';
}
if ($_GET['order'] == 'up') {
  $myOrder = 'createdon ASC';
}
$orderBy = array('parsed'=>array(),'custom'=>array(),'unparsed'=>$myOrder);
?>

<?php
$myOrder = 'createdon DESC';
if ($_GET['order'] == 'down') {
  $myOrder = 'createdon DESC';
}
elseif ($_GET['order'] == 'up') {
  $myOrder = 'createdon ASC';
}
else $myOrder = '';

$orderBy = array('parsed'=>array(),'custom'=>array(),'unparsed'=>$myOrder);
?>

<?php
$xlat = array(
    'down' => 'createdon DESC',
    'up' => 'createdon ASC',
    '...' => '...',
);

// set default
$myOrder = 'createdon DESC';

// possibly fetch it from url
if (isset($_GET['order']) && isset($xlat[$_GET['order']])) {
    $myOrder = $xlat[$_GET['order']];
}

// go ahead and make use of your carefully verified $myOrder...
?>