|
You want to grab the clean user input (aka the password the user typed in), then compare that to the hash (in the database), I assume?
But here you are comparing the user input to $password (which is the hash/SQL entry, I guess?).
Shouldn't it be more like this this, in that case:
if (password_hash($_POST['password'], PASSWORD_BCRYPT) === $password)
{
....
}
__________________
 Contact: email 
|