title: DVWA 1.8 - SQL Injection - Change a users password
body: <p>i am experimenting with DVWA in regards of SQLi. (LOW)
  I have come so far that i can now see the usernames and passwords located in the table "users" in the database "dvwa".
  I was now wondering why I am unable to modify / change / update the password for a specific user by using: </p>
  
  <p><code>; update users set password='098f6bcd4621d373cade4e832627b4f6' WHERE 'user_id'='1' #</code></p>
  
  <p>All it does is throwing a syntax error.
  Is there any way to achieve this?</p>
  
  <p>Thank you very much</p>