if ($asc_desc eq 'ASC') {
    $sql .= " ORDER BY $order_by ASC ";
  } 
  else {
    $sql .= " ORDER BY $order_by DESC ";
  }