Miért nem jó phpban a jelszó kezelő? Az adatbázisban megtalálja a felhasználót, viszont a jelszót valamiért hibásnak érzékeli.

<?php

if (isset($_POST['login-submit'])) {

require 'dbh.php';

$username = $_POST['uid'];

$password = $_POST['pwd'];

if (empty($username) || empty($password)) {

header("Location: ../index.php?error=emptyfields");

exit();

}

else {

$query = "SELECT * FROM tbl_login WHERE username=?;";

$stmt = mysqli_stmt_init($conn);

if (!mysqli_stmt_prepare($stmt, $query)) {

header("Location: ../index.php?error=sqlerror");

exit();

}

else {

mysqli_stmt_bind_param($stmt, "s", $username);

mysqli_stmt_execute($stmt);

$result = mysqli_stmt_get_result($stmt);

if ($row = mysqli_fetch_assoc($result)) {

$pwdCheck = password_verify($password, $row['password']);

if ($pwdCheck == false) {

header("Location: ../index.php?error=wrongpw");

exit();

}

else if ($pwdCheck == true) {

header("Location: ../index.php?login=succes");

exit();

}

else {

header("Location: ../index.php?error=wrongpw");

exit();

}

}

else {

header("Location: ../index.php?error=nouser");

exit();

}

}

}

}