散列密码并使用相同的变量进行验证

我试图创建这个注册页面更安全，然后我添加了这个密码代码

$pas_usr = mysqli_real_escape_string($koneksi, $_POST['pas_usr']);
$pas_usr = password_hash($pas_usr, PASSWORD_BCRYPT);

result is in password column is encrypted

然后在登录页面，当我试图验证它它说错误的密码

这是我的登录页面:

//memulai session baru
session_start();
//memanggil koneksi
include "koneksi.php";
$username = $_POST['username'];
$password = $_POST['password'];
$username = stripslashes($username);  
$password = stripslashes($password);  
$username = mysqli_real_escape_string($koneksi, $username);  
$password = mysqli_real_escape_string($koneksi, $password);  
$hashquery = mysqli_fetch_assoc(mysqli_query($koneksi, "SELECT * FROM `user` WHERE log_usr = '$username'"));
$hash=$hashquery['hash'];
if(password_verify($password, $hash)){
$query = mysqli_query($koneksi, "SELECT * from user WHERE log_usr='$username'");
$exitCount=mysqli_num_rows($query);
    if($exitCount==1){
            $data = mysqli_fetch_array($query);
            $id = $data["log_usr"];
            $lvl = $data["sts_usr"];
            if ($lvl=='A')
            {
                $link = 'index.html';
            }
            elseif($lvl='U')
            {
                $link = 'index.php';
            }
        $_SESSION['username'] = $username;
        header ("location:$link");
        exit();
    }else{
        echo "<script>alert('Username dan Password tidak valid.'); window.location = 'index.php'</script>";
    }
}else{
    echo "<script>alert('Username dan Password tidak valid.'); window.location = 'index.php'</script>";
}