query($sql); $user = $query->getRow(); if(!$user) return false; return password_verify($data['password'], $user->password ); } }