diff --git a/Settings_class.php b/Settings_class.php
index 337c4863..0e08a912 100644
--- a/Settings_class.php
+++ b/Settings_class.php
@@ -56,9 +56,9 @@ function save($data)
                 $query = "
                   UPDATE
                     {$GLOBALS['CONFIG']['db_prefix']}settings
-                  SET VALUE = '$value'
+                  SET VALUE = :value
                   WHERE
-                    name = '$key'
+                    name = :key
                 ";
                 $stmt = $this->connection->prepare($query);
                 $stmt->execute(array(