Just off the top of my head, I think checkboxes are passed through as either "on" or "off" so, assuming each checkbox is given a name that relates to the product it represents it should be simply a case of checking for those that are set to "on" and building an SQL statement accordingly