Vfrdtyky

I am trying to create a log in system with session in php with data mysql but for some reason i keep getting the wrong password every time I sign in (putting in username seems to be fine) I think there is something wrong with comparing the user's password in the data but i am not sure what it is...

<?php





if (isset($_POST['login-submit'])) {



  require 'db.hide.php';



  $mailuserid = $_POST['mailuid'];

  $password = $_POST['pwd'];



  if (empty($mailuserid) || empty($password)) {

    header("Location: ../index.php?error=emptyfields");

    exit();

  }

  else {

    $sql = "SELECT * FROM project3 WHERE user=? OR email=?;";

    $stmt = mysqli_stmt_init($connect);

    if (!mysqli_stmt_prepare($stmt, $sql)) {

      header("Location: ../index.php?error=sqlerror");

      exit();

    }

    else {

      mysqli_stmt_bind_param($stmt, "ss", $mailuserid, $mailuserid);

      mysqli_stmt_execute($stmt);

      $result = mysqli_stmt_get_result($stmt);

      if ($info = mysqli_fetch_assoc($result)) {

        $checkPass = password_verify($password, $info['pass']);

        if ($checkPass == false) {

          header("Location: ../index.php?error=wrongpassword");

          exit();

        }

        elseif ($checkPass == true) {

          session_start();

          $_SESSION['profileId'] = $info['id'];

          $_SESSION['profileUser'] = $info['user'];



          header("Location: ../index.php?login=success");

          exit();

        }

        else {

          header("Location: ../index.php?error=wrongpassword");

          exit();

        }

      }

      else {

        header("Location: ../index.php?error=missinguser");

        exit();

      }

    }

  }



}

else {

  header("Location: ../index.php");

  exit();

}

HERE IS THE TABLE:

<?php

require "header.php";

?>

  <style>

    label {

      display: inline-block;

      width: 160px;

    }

    fieldset {

      width: 300px;

      margin: auto;

    }

  </style>

<main>

  <form action="include/signup.hide.php" method="post">

    <fieldset>

    <legend><h2>Registration Form</h2></legend>

    <label>Username:</label>

    <input type="text" name="user"><br>

    <span class="error"></span><br><br>



    <label>Password:</label>

    <input type="password" name="pwd"><br>

    <span class="error"></span><br><br>



    <label>Email Address:</label>

    <input type="text" name="email"><br>

    <span class="error"></span><br><br>



    <button type="submit" name="button">Signup</button>

    </fieldset>

  </form>

</main>

CODE FOR SIGNING UP ACCOUNT:

<?php

if (isset($_POST['button'])) {



  require 'db.hide.php';



  $username = $_POST['user'];

  $password = $_POST['pwd'];

  $email = $_POST['email'];





  if (empty($username) || empty($password) || empty($email)) {

    header("Location: ../signup.php?error=emptyfields");

    exit();

  }

  elseif (!filter_var($email, FILTER_VALIDATE_EMAIL) && !preg_match("/^[a-zA-Z0-9]*$/", $username)) {

    header("Location: ../signup.php?error=invalidmailuid");

    exit();

  }

  elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {

    header("Location: ../signup.php?error=invalidmail&uid=".$username);

    exit();

  }

  elseif (!preg_match("/^[a-zA-Z0-9]*$/", $username)) {

    header("Location: ../signup.php?error=invaliduid&mail=".$email);

    exit();

  }

  else {

    $sql = "INSERT INTO project3 (user, pass, email) VALUES (?, ?, ?)";

    $stmt = mysqli_stmt_init($connect);

    if (!mysqli_stmt_prepare($stmt, $sql)) {

      header("Location: ../signup.php?error=sqlerror");

      exit();

    }

    else {

      mysqli_stmt_bind_param($stmt, "sss", $username, $password, $email);

      mysqli_stmt_execute($stmt);

      header("Location: ../signup.php?signup=success");

      exit();

    }

  }

  mysqli_stmt_close($stmt);

  mysql_close($connect);

}

else {

  header("Location: ../signup.php");

  exit();

}