Hi,
Well a starting point would be, getting hold of the checked items:
CheckedListBox - Selected Item[
^]
Secondly, StringBuilder is a great way of builing up the SQL string:
StringBuilder Class and example[
^]
Lastly, I would not pass the clear text string into the where clause, the application would become vulnerably to SQL injection, rather make use of named parameters.
Kind regards,