You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND  
				su.user_privacy_search='1' AND 
				su.user_enabled = '1' AND 
				' at line 23