mSqlStr = "SELECT * FROM CLERK WHERE NAME='";
    mSqlStr = mSqlStr + m_strName;
    mSqlStr = mSqlStr + "' AND PASSWORD='";
    mSqlStr = mSqlStr + m_strPassword;
    mSqlStr = mSqlStr + "'";