[Zope] ASC / DESC in queries`?

Uhhhhm, dare i ask another question? What is the correct way (if any) to insert "Asc"/"Desc" arguments in a SQL statement? using dtml-var migth not be clever, since you could insert hostile code, and dtml-sqlvar quotes the values so it inserts 'DESC' instead of DESC.