Code for login gone wrong.

[harman30]

I am having problem logging in, below is a login code. When I submit login info it says Incorrect Information, I have gone wrong somewhere in code and can't figure it out. I have used password_hash() function, checked my database and it works well. Surely somethings wrong with login code. I tried echoing $pass_db and on submitting info I see the password is echoed correctly but incorrect information is also displayed and I am not redirected to main.php as I should be.

<?php
if(isset($_POST['login'])){ 
    $username = $_POST['user_login'];
    $password = $_POST['password_login'];
 
 
$stmt = $db->prepare("SELECT * FROM userss WHERE username = :username");
$stmt->execute(array(':username'=>$username));
$row = $stmt->fetch(PDO::FETCH_ASSOC);
 
$user_db = $row['username'];
$pass_db = $row['password'];
 
if(password_verify($password, $pass_db))  {  
     $_SESSION['username']=$username;
    if (isset($_POST['rememberme'])) {
      setcookie('username', $username,time()[phone]);
     }
       header("Location:main.php");
 
}
 
else {
  echo "Incorrect Information!";
     }
 
}
?>
 

[RonB]

There's no usage of the password_hash() function in the code you posted. Maybe the problem is in the code you didn't post.