Odtnhj

I am writing a login page. The password stored in my database is encrypted using password_hash. When I'm trying to compare between the entered password and the stored password, they don't match.

This is my form:

<input type="text" class="form-control" id="inlineFormInput" placeholder="Jane Doe" name="username" required>

 <input type="password" class="form-control" id="exampleInputPassword1" placeholder="Password" name="password" required>

...and this is my PHP code:

<?php 
 $servername = "localhost";
 $username = "root";
 $password = "";
 $dbname = "lab2";

 if($dbc=@mysqli_connect($servername,$username,$password,$dbname))
 print "connected";
 print "<br>";
 $q = "select * from users where username = '". $_POST['username'] ."'
 ";

 if($result=@mysqli_query($dbc,$q))
 $row = mysqli_fetch_array($result);
 if(password_verify($_POST['password'],$row['password']))
 print "you are logged in!";
 print "<br>";
 else 
 print "username or password error";
 //header('Refresh: 2;login.php');
 



 else
 print "error occured: ";
 print mysqli_error($dbc);
 


 else 
 print "connection error: ";
 print mysqli_connect_error();
 




 ?>

this is how I created the hashed password

$password = $_POST['password'];
 $hashed_password = password_hash($password, PASSWORD_DEFAULT);
 $q = "insert into users (username,email,password,date)
 values ('".$_POST['username']."','".$_POST['email']."','$hashed_password','$date')
 ";