update sys_user set login_pwd=#{newPassword} where user_id=#{userId} and login_pwd = #{password}