Query Update

<?php

$username = $_GET['username'];
$password = $_GET['password'];

include "connect_db.php";

$query = "update tbuser set password = '$password' where username ='".$username."' ";
$result = mysql_query($query, $link) or die('Error query:  '.$query);
echo $result;

?>