Query check where

I'm trying to check in a NodeJS query where a user his id is e.g. 1 and his private_number is 25, the following code doesn't work.

query('SELECT * FROM `users` WHERE `user` = '+pool.escape(user)+', `private_number` ='+pool.escape(number), function(err, row) { //get if the player has a query with the same code

});

Is this even properly possible?

via Martin Dev