function validateUser(const UserName, Password: string): Boolean;
var
  MD5: TIdHashMessageDigest5;
begin
  Result := False;

  MD5 := TIdHashMessageDigest5.Create;
  try
    sqlqry1.Close;
    sqlqry1.SQL.Text := 'SELECT COUNT(*) login_id FROM login WHERE ' +
      'login_username = :username AND login_password = :password';
    sqlqry1.Params.ParamByName('username').AsString := UserName;
    sqlqry1.Params.ParamByName('password').AsString := MD5.HashBytesAsHex(MD5.HashString(Password));
    sqlqry1.Open;

    Result := sqlqry1.Fields[0].AsInteger > 0;
  finally
    MD5.Free;
  end;
end;