https://vulnapp.com/dev/Test%20Code

$result1 = queryMySQL("SELECT user,answer FROM members WHERE user='$user' AND answer='$answer'");
if ($result1->num_rows == 0)
{
$error = "<span class='error'>Answer invalid</span><br><br>";
}

else
{
$result2 = queryMySQL("UPDATE members SET pass='$pass' WHERE user='$user' AND answer='$answer'");
echo "<b>Updated</b><br> ";
}

}