$username = $_POST['username'];
$password= $_POST['username'];

> Get the row from the database for username = username
> Hash $password with the 2nd argument as the hash from the database
> if $password = our hashed result, then the password was correct