Vfrdtyky

I am writing a login page. The password stored in my database is encrypted using password_hash. When I'm trying to compare between the entered password and the stored password, they don't match.

This is my form:

<input type="text" class="form-control" id="inlineFormInput"    placeholder="Jane Doe" name="username" required>



 <input type="password" class="form-control" id="exampleInputPassword1" placeholder="Password" name="password" required>

...and this is my PHP code:

<?php 

        $servername = "localhost";

        $username = "root";

        $password = "";

        $dbname = "lab2";



        if($dbc=@mysqli_connect($servername,$username,$password,$dbname)){

            print "connected";

            print "<br>";

            $q = "select * from users where username = '". $_POST['username'] ."'

            ";



            if($result=@mysqli_query($dbc,$q)){

            $row = mysqli_fetch_array($result);

                if(password_verify($_POST['password'],$row['password'])){

                    print "you are logged in!";

                    print "<br>";

                }else {

                    print "username or password error";

                    //header('Refresh: 2;login.php');

                }







            }else{

                print "error occured: ";

                print mysqli_error($dbc);

            }





        }else {

            print "connection error: ";

            print mysqli_connect_error();

        }









        ?>

this is how I created the hashed password

$password = $_POST['password'];

            $hashed_password = password_hash($password, PASSWORD_DEFAULT);

               $q = "insert into users (username,email,password,date)

                values ('".$_POST['username']."','".$_POST['email']."','$hashed_password','$date')

                ";