diff --git a/url-ownership/plugin.php b/url-ownership/plugin.php
index 00692279d8aa6a1d957d175133537660a4e0fc4b..210feee7496f0bf9f448f5cbbb31c579def008f6 100644
--- a/url-ownership/plugin.php
+++ b/url-ownership/plugin.php
@@ -74,8 +74,9 @@ function uo_add_owner_cells_filter( $cells, $keyword, $url, $title, $ip, $clicks
     global $ydb;
 
     $table = YOURLS_DB_YOURLS_OWNER;
-    $sql   = "SELECT owner FROM `$table` where `keyword` = '$keyword'";
-    $whoOwns = $ydb->fetchValue($sql);
+    $sql   = "SELECT owner FROM `$table` where `keyword` = :keyword";
+    $binds = array('keyword' => $keyword);
+    $whoOwns = $ydb->fetchValue($sql, $binds);
 
     if (!$whoOwns) {
         $whoOwns = 'No Record';