zones_controller.rb

        def sanitize_order_by(query)
          return nil unless params[:order_by]
          column, direction = params[:order_by].split
          column = Zone.column_names.include?(column) ? column : 'name'
          direction = %w{asc desc}.include?(direction) ? direction : 'asc'
          "#{column} #{direction}"
        end