Password_Hash not working on my PHP login

by

You should not have and password = '$password' in the query. The password in the database is the hashed password, not the same as $password. You should just fetch the row using the email, then use password_verify() to check the password.

You also need to select the password column so you can verify it.

$check_email = mysqli_query($conn, "SELECT id, password FROM users WHERE email="$email"");

You also have problems with your logic. You set the session variable and redirect to home regardless of the password verification. It should be:

$row = mysqli_fetch_array($check_email);
    
if ($row && password_verify($password, $row['password'])){
    $msg[] = "You have successfully logged in.";
    $_SESSION["user_id"] = $row['id'];
    header('Location: home');
} else {
    $msg[] = "The password or email is incorrect.";
}

You also shouldn’t escape the password before hashing or verifying it. And of course, if you correctly use prepared statements with parameters, you shouldn’t escape anything first.

More Related Contents:

  1. Undefined index $_POST
  2. Cannot connect to MySQL 4.1+ using old authentication
  3. PHP – Secure member-only pages with a login system
  4. SQLSTATE[HY000] [1698] Access denied for user ‘root’@’localhost’
  5. If number have inside number string [closed]
  6. recurring system my sql query [closed]
  7. Cannot modify header information [duplicate]
  8. Gather column name of a table from database [closed]
  9. inserting information and image in php and mysql
  10. CodeIgniter – foreach loop
  11. Project Links do not work on Wamp Server
  12. Using Jquery Ajax to retrieve data from Mysql
  13. PHP, MySQL error: Column count doesn’t match value count at row 1
  14. displaying an image stored in a mysql blob
  15. MySQL – count total number of rows in php
  16. Fix Access denied for user ‘root’@’localhost’ for phpMyAdmin
  17. SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax — PHP — PDO [duplicate]
  18. What does a successful MySQL DELETE return? How to check if DELETE was successful?
  19. check if the query results empty row mysqli [duplicate]
  20. PHP – Import CSV file to mysql database Using LOAD DATA INFILE
  21. double results in my array ( mysql_fetch_array )
  22. How best to get someone’s ‘rank’ from a scores table with php and mysql without looping
  23. php:Store image into Mysql blob, Good or bad?
  24. How to get rid of MySQL error ‘Prepared statement needs to be re-prepared’
  25. How to prepare statement for update query? [duplicate]
  26. Use of PDO in classes [duplicate]
  27. How do you make good use of multicore CPUs in your PHP/MySQL applications? [closed]
  28. Update query PHP MySQL [duplicate]
  29. Do I have to use mysql_real_escape_string if I bind parameters?
  30. How to sort MYSQL fulltext search results by relevancy

Leave a Comment