title: password_verify() doesnt work when fetch from database
body: <p>What wrong with my code? please need some help cause I dont see any problem. but still password_verify doesnt work.</p>
  
  <pre><code>public function login($username, $password){
      global $db;
      $sql = 'SELECT id,password FROM '.DB_PREFIX.'admin WHERE username="'.$username.'"';
      $result = $db-&gt;query($sql);
      $row = $result-&gt;fetch_assoc();
      $pass = $row['password'];
      if (password_verify($password,$pass)) {
          echo "Valid";
      }else{
          echo "Invalid";
      }
  }
  </code></pre>
  
  <p>This is the password hashing and then save to DB</p>
  
  <pre><code>public function addnewadmin($username,$password)
  {
  
      global $db;
      $hash = password_hash($password, PASSWORD_DEFAULT);
      $sql = "INSERT INTO admin (username, password) VALUES ('".$username."', '".$hash."')";
      $result = $db-&gt;query($sql);
  
      return true;
  
  }
  </code></pre>