{} for table names

from the API: Queries sent to Drupal should wrap all table names in curly brackets. This function searches for this syntax and adds Drupal's table prefix to all tables, allowing Drupal to coexist with other systems in the same database if necessary.

right now your module won't for sites that use table prefixes. just need to wrap every table name with {}