In　order　to　protect　the　privacy　of　query　user　and　database,　some　QKD-based　quantum　private　query　(QPQ)　protocols　were　proposed.　Unfortunately　some　of　them　cannot　resist　internal　attack　from　database　perfectly;　some　others　can　ensure　better　user　privacy　but　require　a　reduction　of　database　privacy.　In　this　paper,　a　novel　two-way　QPQ　protocol　is　proposed　to　ensure　the　privacy　of　both　sides　of　communication.　In　our　protocol,　user　makes　initial　quantum　states　and　derives　the　key　bit　by　comparing　initial　quantum　state　and　outcome　state　returned　from　database　by　ctrl　or　shift　mode　instead　of　announcing　two　non-orthogonal　qubits　as　others　which　may　leak　part　secret　information.　In　this　way,　not　only　the　privacy　of　database　be　ensured　but　also　user　privacy　is　strengthened.　Furthermore,　our　protocol　can　also　realize　the　security　of　loss-tolerance,　cheat-sensitive,　and　resisting　JM　attack　etc.