参数不校验就直接查数据库吗？

https://www.arcblock.io/content/api/blogs?page=1&size=18&locale=zh&tagMatchStrategy=all&sort=---publishTime

{"code":-1,"message":"SQLITE_ERROR: no such column: Post.--publishTime"}