UPDATE user SET password = ? WHERE name = ?