Authorization problem, what to do?

Question

PHP

Hello, I have a problem and I can't figure it out since Monday.
There is a database (if you need its screenshots, I'll throw it off), user registration goes normally through the new password_hash function and all data goes into the users table in the database. But if you go into registration using the code below, mysqli_num_rows will always display zero, only when adding to the count(*) request
, something starts to move, but then the password will always be correct.
The question is, what is wrong with my login code?
Here is the signin.php code

<?php
session_start();
require_once 'connect.php';
global $connect;

$login = $_POST['login'];
$password = $_POST['password'];
$heshik = password_hash($password, PASSWORD_DEFAULT);
$VerifyPass = password_verify($password, $heshik);


$check_user = mysqli_query($connect, "SELECT * FROM users WHERE login = '$login' AND password = '$password'");

echo mysqli_num_rows($check_user);

echo mysqli_error($connect);	

if (mysqli_num_rows($check_user) > 0){

  $user = mysqli_fetch_assoc($check_user); 

  $_SESSION['user'] = [
    "id" => $user['id'],
    "login" => $user['login'],
    "avatar" => $user['avatar'],
    "email" => $user['email']
  ];

}else{
  echo 'hui';
}
?>

Here is the signup.php code

<?php
session_start();

require_once 'connect.php';

$login = $_POST['login'];
$password = $_POST['password'];
$password_2 = $_POST['password_2'];
$email = $_POST['email'];

if ($password === $password_2){


  $path = 'http://localhost/EGCDMsite/uploads/' . time() . $_FILES['avatar']['name'];
  if (!move_uploaded_file($_FILES['avatar']['tmp_name'], $path)){
    $_SESSION['message'] = 'Ошибка при загрузке изображения';
    header('Location: http://localhost/EGCDMsite/php/EGCDMreg.php');
  }

  $password = password_hash($password, PASSWORD_DEFAULT);

  mysqli_query($connect, "INSERT INTO 'users' ('id', 'login', 'password', 'email', 'avatar') VALUES (NULL, '$login', '$password', '$email', '$path') ");

      $_SESSION['message'] = 'Регистрация прошла успешно!';
      header('Location: http://localhost/HelloPage.html');
}
else {
  $_SESSION['message'] = 'Пароли не совпадают!';
  header('Location: http://localhost/EGCDMsite/php/EGCDMreg.php');	
}
?>

Answer 1

password_hash always returns a different hash, to check you need to use password_verify.
password_hash - used only for registration and password change
password_verify - only for authorization
I.e. by login, you get a record from the database and through password_verify you compare the hash of the database with the specified password