Syntax Error in ASP update Statement

Error Type:
Microsoft OLE DB Provider for ODBC Drivers (0x80040E14)
[Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression ‘(fullname = Gary Lee)’.
**/Prj4/FYPLevel1.asp, line 383
[SIZE=2]

    <%
    if varlevel < 3 then

        varlevel = varlevel + 1            
    
        'Increment database by 1
        dim objConn,objRec,SQL

          Set objConn = Server.CreateObject("ADODB.Connection")
          Set objRec = server.CreateObject("ADODB.Recordset")
          
          objConn.Mode = 0
          
          SQL = "UPDATE userInfo SET vlevel = " &varlevel& " WHERE (fullname = " &varName& ")"

          
          objConn.Open StrCon
          objRec.Open SQL, objConn       ---->(This is my line 383)
          
         ' objConn.Execute(SQL)
          
        objRec.Close
        objConn.Close
        set objRec = nothing
        set objConn = nothing
        %>
        alert("increase!")
        <%
        
    end if
    %>

I’ve look at some post from other forum regarding this error message and ‘Syntax Error in Update Statement (as i’d that error message before this)’ …

But is it because ASP treat my varName as something else? Cus my varName is a string and my varlevel is a integer actually…

If anyone could guide me into the light that is great=)
[/SIZE]**