diff --git a/lib/DB_Worker.py b/lib/DB_Worker.py
index 308228c..3805ef0 100644
--- a/lib/DB_Worker.py
+++ b/lib/DB_Worker.py
@@ -142,8 +142,8 @@ async def read_db(guild: int, user: int, column: str):
     try:
         sql_con = sqlite3.connect("user.db")
         cursor = sql_con.cursor()
-        sql_read = f"""SELECT * FROM "{guild}" where userid = {user}"""
-        cursor.execute(sql_read)
+        cursor.execute(f"""SELECT * FROM "%(guild)" where userid = %(user)""",
+                       {'guild': guild, 'user': user})
         record = cursor.fetchone()
         return record[_col_dict[column]]
     except sqlite3.Error as _error: