if($query eq '*'){
$sth = $db->prepare("SELECT * FROM data ORDER BY[$orderkey]");
$sth->execute();
...
if($query eq $name ){
$sth = $db->prepare("SELECT ? FROM data order by [$orderkey]");  
$sth->execute($name);