每次调用自定义方法都报错，提示sql语句未能正确的结束

Question

public Boolean Verify(string Userid,string Authorizedlevel,string Authorizedcomcode)
{
Boolean Verify = false;
string queryuser = "select userid,authorizedlevel,authorizedcomcode from USERAUTHORIZATION where userid= '" + Userid + "'and authorizedlevel= '" + Authorizedlevel + "'and authorizedcomcode= '" + Authorizedcomcode + "'";
DataSet dsuser = dbop.ExecSQL(queryuser, "MajorTraceConn");
if (dsuser.Tables[0].Rows.Count > 0)
{
Verify = true;
}
return Verify;
}
代码如上，请问这是什么问题呀

Answer 1

select userid,authorizedlevel,authorizedcomcode from USERAUTHORIZATION where userid= '" + Userid + "'and authorizedlevel= '" + Authorizedlevel + "'and authorizedcomcode= '" + Authorizedcomcode + "'

应该是sql写错了， and 前面漏了空格吧，你把完整的sql检查一遍