prima del $querychange metti

echo "UPDATE users SET password='$newpassword' WHERE username='$user'";