you can put your query in a varchar variable like this:

declare @STR varchar(4000)

set @STR='select * from tbl order by ' + @orderByPhrase

and exexute