<?php
$password = Bcrypt::hashPassword($_POST['mdp_user']);

$pwdVerify = Bcrypt::checkPassword($_POST['mdp_user'], $password);

$sql = 'SELECT * FROM tgn_users WHERE login="' . $_POST[ 'login' ] . '" AND mdp_user="' . $password  . '"';

echo $sql;

$req = mysqli_query( $connexion, $sql )or die( mysqli_error( $connexion ) );

if ( mysqli_num_rows( $req ) > 0 ) {
    $nom_user = $_SESSION['nom_user'];
    $prenom_user = $_SESSION['prenom_user'];
    $_SESSION[ 'islog' ] = "connect";
    //header( 'Location: ../../profile.php' );

} else {
    $_SESSION[ 'login' ] = $_POST[ 'login' ];
    $_SESSION[ 'mdp_user' ] = $_POST[ 'mdp_user' ];
    $_SESSION[ 'message' ] = "Erreur de log et/ou de pwd";
    //header( "Location: " . $_SERVER[ 'HTTP_REFERER' ] );
}
  ?>

<?php
require_once 'Bcrypt.php';

// hash the password => returns hashed password
Bcrypt::hashPassword($password);

// check $password against the $hashedPassword => returns true/false
Bcrypt::checkPassword($password, $hashedPassword);
?>