UPDATE user SET Password=password(?) WHERE User = ?