diff --git a/seafile-ldap.py b/seafile-ldap.py
index c3562c3..4980023 100644
--- a/seafile-ldap.py
+++ b/seafile-ldap.py
@@ -166,9 +166,9 @@ for ldapUser in ldapUsers:
     logger.debug("Checking if LDAP user is in SQl Table")
     cnx = mysql.connector.connect(**dbconfig)
     cursor = cnx.cursor()
-    query = ("SELECT * FROM LDAPUsers WHERE email = \"{0}\"".format(ldapUser.mail))
-    logger.debug("Query: {0}".format(query))
-    cursor.execute(query)
+    query = ("SELECT * FROM LDAPUsers WHERE email = %s")
+    cursor.execute(query, (ldapUser.mail,))
+    logger.debug("Cursor: {0}".format(cursor))
     row_count = cursor.rowcount
     logger.debug("Found {0} SQL LDAP users".format(cursor.rowcount))
     sqlLDAPuser = cursor.fetchall()