PHP-password_verify始终返回false（错误的密码）

Question

I am having issues with getting password_verify to work correctly, it always returns false (incorrect password). When I echo the password, it shows the correct password. Any ideas? Here is my code:

<?php
    $servername = "localhost";
    $database_name = "xxx";
    $database_username = "xxx";
    $database_password = "xxx";
    $username = $_POST['username'];
    $password = $_POST['password'];
    $conn = mysqli_connect ($servername, $database_username, $database_password, $database_name);
    $error_message = "";
    $allowed_chars = "/^[A-Za-z .'-]+$/";
  $email_chars = '/^[A-Za-z0-9._%-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,4}$/';
    function error ($error) {
        echo $error;
        die();
    }
    if ($conn->connect_error) {
        die ("Connection failed: " . $conn->connect_error);
    }
    $sql = "SELECT username, password FROM users";
    $query = mysqli_query ($conn, $sql);
    while ($row = mysqli_fetch_assoc ($query)) {
        echo 'Username: ' . $row["username"] . '<br>' . 'Password: ' . $password . '<br>' . 'Hashed Password: ' . $row["password"] . '<br><br>';
    }
    $hashed_password = "SELECT password FROM users WHERE username = '$username'";
    $query = mysqli_query ($conn, $hashed_password);
    if (!isset ($query)) {
        echo '$query doesn\'t appear to be set' . '<br>';
    } else {
        echo '$query is set' . '<br>';
    }
    $password_input = password_verify ($password,   $hashed_password);
    $result = mysqli_fetch_assoc ($query);
    $login_cred = "SELECT * FROM users WHERE username='$username'";
    if ($password_input) {
        echo 'The password you entered is correct!';
    } else {
        echo 'The password you entered is incorrect!';
    }
?>

Database structure for password

Cheers, any help is highly appreciated.

Answer 1

$hashed_password was a SQL query, not the row output from the database.

Here is the fixed snippet

<?php
    $hashed_password = "SELECT password FROM users WHERE username = '$username'";
    $query = mysqli_query ($conn, $hashed_password);
    $row = mysqli_fetch_assoc ($query);
    $hashed_password = $row['password'];
?>

Here is that snippet implemented

<?php
    $servername = "localhost";
    $database_name = "xxx";
    $database_username = "xxx";
    $database_password = "xxx";
    $username = $_POST['username'];
    $password = $_POST['password'];
    $conn = mysqli_connect ($servername, $database_username, $database_password, $database_name);
    $error_message = "";
    $allowed_chars = "/^[A-Za-z .'-]+$/";
    $email_chars = '/^[A-Za-z0-9._%-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,4}$/';
    function error ($error) {
        echo $error;
        die();
    }
    if ($conn->connect_error) {
        die ("Connection failed: " . $conn->connect_error);
    }
    $sql = "SELECT username, password FROM users";
    $query = mysqli_query ($conn, $sql);
    while ($row = mysqli_fetch_assoc ($query)) {
        echo 'Username: ' . $row["username"] . '<br>' . 'Password: ' . $password . '<br>' . 'Hashed Password: ' . $row["password"] . '<br><br>';
    }
    $hashed_password = "SELECT password FROM users WHERE username = '$username'";
    $query = mysqli_query ($conn, $hashed_password);
    $row = mysqli_fetch_assoc ($query);
    $hashed_password = $row['password'];
    $password_input = password_verify ($password,   $hashed_password);
    $result = mysqli_fetch_assoc ($query);
    $login_cred = "SELECT * FROM users WHERE username='$username'";
    if ($password_input) {
        echo 'The password you entered is correct!';
    } else {
        echo 'The password you entered is incorrect!';
    }
?>