password/index.php

<?php
$con = new PDO('mysql:host=127.0.0.1;dbname=sql_injection', 'root', '');
if (isset($_POST['submit'])) {
    $name = trim($_POST['name']);
    $password = trim($_POST['password']);
    $userQuery = $con->prepare("SELECT * FROM users WHERE name = :name");
    $userQuery->execute(['name' => $name]);
    $user = $userQuery->fetch(PDO::FETCH_OBJ);
    $db_password = $user->password;
    if (password_verify($password, $db_password)) {
        echo "<p class='bg-success'>User verified</p>";
    } else {
        echo "<p class='bg-danger'> User not verified</p>";
    }
    //    $insertQuery = $con->prepare("INSERT INTO users(name, email, password) VALUES(:name, :email, :password) ");
    //
    //    $insertQuery->execute([
    //
    //        'name'=> $name,
    //        'email'=> 'edwin@codingfaculty.com',
    //        'password'=> password_hash($password, PASSWORD_BCRYPT, [12])
    //
    //
    //    ]);
    //
    //
    //
    //    $userQuery = $con->prepare("SELECT * FROM users WHERE name = :name ");
    //
    //
    //
    //
    //    $userQuery->execute([
    //
    //
    //        'name'=> $name
    //
    //
    //
    //    ]);
    //
    //
    //
    //
    //
    //    if($userQuery->rowCount()){
    //
    //        echo "WE FOUND A USER";
    //
    //
    //    }
    
}
?>

<!doctype html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Document</title>
    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css">
</head>

<body>

<div class="col-sm-6 col-sm-offset-4">
<form action="" method="post" autocomplete="off">
    <h2>Login</h2>
    <div class="form-group">
        <label for="name">
            Name
            <input type="text" name="name" class="form-control">

        </label>
    </div>
    <div class="form-group">
        <label for="password">
            Password
            <input type="text" name="password" class="form-control">
        </label>
    </div>
    <input type="submit" name="submit" class="btn btn-primary">
</form>
</div>

</body>
</html>