根据会员编号、会员名称、会员积分、店铺编号查询数据的简单方法(sql语句)

/// <summary>
        /// 根据会员编号、会员名称、会员积分、店铺编号查询数据
        /// </summary>
        /// <param name="bianhao">会员编号</param>
        /// <param name="username">会员名称</param>
        /// <param name="jifen">会员积分</param>
        /// <param name="id_shop">店铺编号</param>
        /// <returns>返回一个dataset</returns>
        public DataSet getList(string bianhao, string username, int jifen, int id_shop)
        {
            StringBuilder strSql = new StringBuilder();
            strSql.Append(" SELECT h.*,s.name as shopname,l.username as loginname");
            strSql.Append(" FROM huiyuan h");
            strSql.Append(" LEFT JOIN shop s ON h.id_shop = s.id");
            strSql.Append(" LEFT JOIN login l ON h.id_login = l.id");
            strSql.Append(" where 1 = 1 ");
            if (bianhao != string.Empty)
            {
                strSql.Append(" and h.bianhao like '%"+bianhao+"%'");
            }
            if (username != string.Empty)
            {
                strSql.Append(" and h.username like '%" + username + "%'");
            }
            if (jifen != -1)
            {
                if (jifen == 0)
                {
                    strSql.Append(" and h.jifen < 0");
                }
                if (jifen == 500)
                {
                    strSql.Append(" and (h.jifen >= 0 and h.jifen <500)");
                }
                if (jifen == 1000)
                {
                    strSql.Append(" and (jifen >= 500 and jifen <1000) ");
                }
                if (jifen == 5000)
                {
                    strSql.Append(" and (jifen >= 1000 and jifen <5000) ");
                }
                if (jifen == 10000)
                {
                    strSql.Append(" and (jifen >= 5000 and jifen <10000) ");
                }
                if (jifen == 10001)
                {
                    strSql.Append(" and jifen >= 10000 ");
                }
            }
            if (id_shop != 0)
            {
                strSql.Append(" and h.id_shop = " + id_shop);
            }
            return DbHelperSQL.Query(strSql.ToString());
        }