Read bcrypted passwords - Login system PHP

[hnhlove12]

So I’ve got a game server that creates a username and a bycrypted password and stores it in a database in mysql. Now I’m having trouble with logging in due to the code not being able to read bcrypted passwords. How do I make my code be able to read bycrypt passwords?

<?php
$con = mysqli_connect("localhost", "root", "", "testrealm");

if(isset($_POST['Login'])) {
    $Username = $_POST['Username'];
    $Password = $_POST['Password'];
    $query = "SELECT * FROM accounts WHERE Username='$Username' AND Password='$Password'";
    $result = mysqli_query($con, $query);

    If(mysqli_num_rows($result) == 1)
    {
        header("Location: welcome.php");
    }
    else
        header("Location: denied.php");
}

[johnphpnewb]

@hnhlove12

Now I’m having trouble with logging in due to the code not being able to read bcrypted passwords.

the purpose of a hashed password. But did you specify bcrypt or PASSWORD_DEFAULT? I recommend using PASSWORD_DEFAULT and implementing password_needs_rehash.
https://www.php.net/manual/en/function.password-needs-rehash.php

I also recommend using PDO and prepared statements instead of mysqli:

(The only proper) PDO tutorial

the simple answer to your question is password_verify:
password_verify($Password, $hashed_result_from_database)

@hnhlove12

If(mysqli_num_rows($result) == 1)

you need to use exit or die after the header redirect. I prefer exit;

edit: i’ve removed some code that could be confusing to a beginner. my apologies.