As per the MySQLdb documentation, you can use placeholders only for column names, not table names etc. You might want to go through this link (look for paramstyle)
So you can take input from the user as to what column he/she wants to select, but not which table to select from.
So you can take input from the user as to what column he/she wants to select, but not which table to select from.