Untitled

<html>
    <head>
        <meta charset="UTF-8">
        <title></title>
    </head>
    <body>
        <h1>Administrativ person</h1>
        <h2>Innloggingsside</h2>
        <br>
        <form action="" method="post">
            <table>
                <tr>
                    <td>User:</td><td><input type="text" name="brukernavn" /></td>
                </tr>
                <tr>
                    <td>Password:</td><td><input type="text" name="passord" /></td>
                </tr>
                <tr>
                    <td><input type="submit" name="logginn" value="Log in"/></td>
                </tr>
                <tr>
                    <td><input type="submit" name="nybruker" value="New user"/></td>
                </tr>
            </table>
        </form>
     <?php
         if(isset($_POST["logginn"]))
         {
             $con= new mysqli("localhost","root","","vm_ski");
             if($con->connect_error)
             {
                 die("Couldn't connect to database!");
             }
             $user = $con->real_escape_string($_POST["brukernavn"]);
             $password = $con->real_escape_string($_POST["passord"]);
             $sql = "Select Passord From administrator Where Brukernavn ='$user'";
             $result = $con->query($sql);
             if($con->affected_rows>=1)
             {
                 $row = $result->fetch_object();
                 $passwordHash = $row->Passord;
                 $ok = password_verify($password, $passwordHash);
                 if($ok)
                 {
                     header("location: side3.php");
                 }
                 else
                 {
                     echo "Password is NOT correct";
                 }
             }
             else
             {
                 echo "Write username!";
             }
         }
         if(isset($_POST['nybruker']))
         {
             header('location: side2.php');
         }
     ?>
    </body>
</html>