100分在线等一个SQL语句！

[zhz586]

数据库中：company_id,pass,end_date,company_name!
我要在该表中通过公司company_id或者公司名称company_name找到pass=1和end_date>now()的记录。
下面的语句肯定不对，高手们帮我下吧~~~
strSQL = "select * from buy_and_sell_info where company_id = "+ member_id + " or company_name = '%"+ name +"%' and end_date >=now() and pass = 1 order by ID DESC";

[嬉皮]

strSQL = "select * from buy_and_sell_info where (company_id = "+ member_id + " or company_name = '%"+ name +"%') and end_date >=now() and pass = 1 order by ID DESC";

[trampwind]

strSQL = "select * from buy_and_sell_info where (company_id = "+ member_id + " or company_name = '%"+ name +"%') and end_date >=now() and pass = 1 order by ID DESC";