How to pass parameters to query?

I'm trying to write a query for my application, but I'm having some troubles. I need to pass as a parameter one field of my database, like:

SELECT name, phone, email 
FROM company 
WHERE $P{clause} = $P{key}
ORDER BY $P{order}

Because WHERE clause and ORDER BY clause are dynamic for the user to select.

Using $P{} it didn't work.