Titanium database

dbConn.execute('INSERT INTO users (userName, userPassword) VALUES("' + theUsername + '", "' + md5Password + '");');
alert("works")
dbConn.execute('UPDATE users SET (`userPassword`="?") WHERE userName="?";', md5Password, theUsername);
alert("Does not work");