mysql - I need assistance in determing what is wrong with my delete statement -

ok, keep getting a:

fatal error: have error in sql syntax; check manual corresponds mysql server version right syntax:

my delete statement looks this:

"delete tblsymbol userid=$personid"."and symbol=$stock" 

does see wrong delete statement? using right?

first of all, there not seem space before and.

second, code vulnerable sql injection. should not use $ variables construct statements. instead, use ? instead , prepared statements.