请问sql语句写法

请教sql语句写法？
$sql1是根据用户输入选择值动态生成的:


$ConditionsNumber=6;
$ConditionsArray=array( "$condition1 ", "$condition2 ", "$condition3 ", "$condition4 ", "$condition5 ", "$condition6 ");
$SearchSQLArray=array( " where ip= '$condition1 ' ", " where bianhao= '$condition2 ' ", " where name= '$condition3 ' ", " where user= '$condition4 ' ", " where bankid= '$condition5 ' ", " where equimode= '$condition6 ' ");

for($i=0;$i <$ConditionsNumber;$i++)
{
if($ConditionsArray[$i]== " ")
$SearchSQLArray[$i]= " ";
$haveWhere=false;
for($j=0;$j <$i;$j++)
{
$wherePosition=strpos($SearchSQLArray[$j], "where ");
if(($wherePosition== "1 ")&&($haveWhere==false))
{
$SearchSQLArray[$i]=ereg_replace( "where ", "and ",$SearchSQLArray[$i]);
$haveWhere=true;
}
}
};

for($i=0;$i <$ConditionsNumber;$i++)

$sql1=$sql1.$SearchSQLArray[$i];

$sql = "select * from oareport ".$sql1. "; ";