functions.php

        //protect field against sql injections
        $username = mysqli_real_escape_string($connect, $username);
        $password = mysqli_real_escape_string($connect, $password);
        //encrypt password
        $hashFormat = "$2y$10$";
        $salt = "iusesomecrazystrings222222";
        $hashSalt = $hashFormat . $salt;
        $password = crypt($password, $hashSalt);

        $query = "INSERT INTO users(username,password) "
                . "VALUES ('$username', '$password')";