SELECT [columns]
   FROM user
   WHERE id='$id' AND passwd=PASSWORD('$pwd')
   

##</code><code>##

UPDATE user
   SET passwd=PASSWORD('$pwd')
   WHERE id='$id'