Reset password

<?php

	$db = mysqli_connect('localhost', 'root', '', 'recover');


	if(isset($_GET['token']))
	{
		$token = mysqli_real_escape_string($db, $_GET['token']);
		$query = "SELECT * FROM forgot_password WHERE token ='$token'";
		$run = mysqli_query($db, $query);

		if(mysqli_num_rows($run) > 0)
		{
			$row = mysqli_fetch_array($run);
			$token = $row['token'];
			$email = $row['email'];
		}
		else
		{
			header("location:login.php");
		}
	}

	if(isset($_POST['btn_reset']))
	{
		$email    = mysqli_real_escape_string($db, $_POST['email']);
		$password = mysqli_real_escape_string($db, $_POST['password']);
		$con_pass = mysqli_real_escape_string($db, $_POST['confirm_password']);

		$options = ['cost'=>11];
		$hashed = password_hash($password, PASSWORD_BCRYPT, $options);

		if($password != $con_pass)
		{
			$msg = "<div class='alert alert-danger'>Passwords do not match </div>";
		}

		elseif(strlen($password) < 8)
		{
			$msg = "<div class='alert alert-danger'>Password must be at least 8 characters </div>";
		}
		else
		{
			$query ="UPDATE register SET password = '$hashed' WHERE email='$email'";
			mysqli_query($db, $query);
			$query = "DELETE FROM forgot_password WHERE email = '$email'";
			mysqli_query($db, $query);

			$msg = "<div class='alert alert-success'>Password updated successfully </div>";
		}
	}

?>
<!DOCTYPE html>
<html>
<head>
	<title>Password </title>
	<link rel="stylesheet" type="text/css" href="css/bootstrap.css">
	<link rel="stylesheet" type="text/css" href="css/bootstrap.min.css">
	<link rel="stylesheet" type="text/css" href="css/font-awesome.min.css">
	<link rel="stylesheet" type="text/css" href="styles.css">
</head>
<body>

	<div class="container" style="margin-top: 100px;">
		<div class="row justify-content-center">
			<div class="col-md-6 col-md-offset-3">
				<h2>Reset Password</h2>
				<form action="reset.php" method="POST">
					<div class="form-group">
						<label>Email</label>
						<input type="email" name="email" value="<?php echo $email; ?>" class="form-control">
					</div>

					<div class="form-group">
						<label>New Password</label>
						<input type="password" name="password" class="form-control">
					</div>
					<div class="form-group">
						<label>Confirm Password</label>
						<input type="password" name="confirm_password" class="form-control">
					</div>

					<?php if (isset($msg)){ echo $msg; } ?>
					<div class="form-group">
						<button type="submit" name="btn_reset" class="btn btn-success">Reset Password</button>
					</div>

				</form>
			</div>
		</div>
	</div>


<script type="text/javascript" src="js/bootstrap.js"></script>
<script type="text/javascript srcjs/bootstrap.min.css"></script>
</body>
</html>