Untitled

<!DOCTYPE html>
<html>
    <head>
        <meta charset='utf-8'/>
        <meta http-equiv='Content-type' content='text/html; charset=utf-8'/>
        <meta name='viewport' content='width=device-width, initial-scale=1'/>
        <title>Submitted.</title>
    </head>
    <body>
        <?php
            $servername = "localhost";
            $username = "root";
            $password = "testing123";
            $database = "main";

            // Create connection
            $sql = new mysqli($servername, $username, $password, $database);
            if ($sql->connect_error) {
                die("Connection failed: " . $sql->connect_error);
            } else {
                echo "Connected successfully to database. <br>";
            }

            //Handle Logins
            if ($_SERVER["REQUEST_METHOD"] == "POST") {
                $username = mysqli_real_escape_string($sql, $_POST["username"]);
                $password = mysqli_real_escape_string($sql, $_POST["password"]);
                $query = "SELECT PASSWORD FROM USERS WHERE USERNAME = '$username'";
                $result = mysqli_query($sql, $query);
                $hash = mysqli_fetch_field($result);
                $hash = mysqli_fetch_assoc($result)["PASSWORD"];
                if (password_verify($password, $hash)) {
                    echo "Sucessfully logged in as $username!";
                } else {
                    echo "Incorrect username or password.";
                }
            }
        ?>
    </body>
</html>