MySQLResult := MySQLClient.Query('SELECT * FROM user WHERE userid='+login+' and password='+password, True, ok);
так наверно надо