$user = $_GET['username'];
$password = $_GET['password'];
$hwid = $_GET['hwid'];
$tables = "mybb_users";
$token = $_GET['token'];

$sql = "SELECT * FROM ". $tables ." WHERE username = '". mysqli_real_escape_string($link,$user) ."'" ;
$result = $link->query($sql);
if ($result->num_rows > 0) {
// Outputting the rows
while($row = $result->fetch_assoc())
{
// Password encryption and check
$password = $row['password'];
$salt = $row['salt'];
$plain_pass = $_GET['password'];
$stored_pass = md5(md5($salt).md5($plain_pass));

// Status Holders
$passwordstatus;
$hwidstatus;

?>

public static function setPassword($user, $password){
$id = $user->getId();
$options = [
'cost' => Config::get('bcrypt_cost'),
];
$hashed = password_hash($password, PASSWORD_BCRYPT, $options);
return DB::query('UPDATE users SET password=:password WHERE id=:id', array(':id' => $id, ':password' => $hashed));
}