prepare($sql); $stmt->bindParam(1, $_POST['username']); if ($stmt->execute()){ $data = $stmt->fetchAll(PDO::FETCH_ASSOC)[0]; $password = $data['password']; if (password_verify($_POST['password'], $password)){ $_SESSION['username'] = $data['username']; $_SESSION['email'] = $data['email']; header("Location: ../"); } } } ?>