$username = ...;
$password = ...;
$user = "SELECT * FROM users WHERE username='$username'";
if ($user) {
if (password_verify($password, $user->password)) {
if (password_heed_rehash($user->password, PASSWORD_DEFAULT)) {
$user->password = password_hash($password, PASSWORD_DEFAULT);
$user->save();
}
$message = 'You are logged in!';
} else {
$message = 'Incorrect username or password';
}
} else {
$message = 'Incorrect username or password';
}
возможно это был перебор