$username = $_POST["username"];
$password = $_POST["password"];

$result = $conn->query("SELECT * FROM User WHERE username ='$username'");

    if(empty($result)){
        die("Username doesn't exist");
    }

$dbpass = $conn->query("SELECT password FROM User WHERE username = '$username'");

if (password_verify($password, $dbpass)){

    $stmt = "SELECT * FROM User WHERE username='$username' and password='$password'";

    $check = mysqli_fetch_array(mysqli_query($conn, $stmt));

    if(isset($check)){
        echo "success";
    }else{
        echo "Invalid Username or Password";
    }
}
else {
    echo "password not unhashing";
}