Complex sql query (for me anyway)

[Teodor]

Just note that you can't use dynamic values for parameters / can't send dynamic column names there. More info:

Creating Custom SQL Queries

That said, parameters are really for values only. You can’t create dynamic sql with them like having dynamic column names or sorting order based on parameters.