Get password verify to work

See more:

PHP

MySQL

<?php
$msg = "";
if(isset($_POST['login'])) {
$username = stripcslashes($_POST['username']);
$password = $_POST['password'];
if($username != "" && $password != "") {
try {
//SELECT username,password FROM User WHERE username='$username' AND password='$password');
//$this->result = $this->sql->prepare('SELECT username,password FROM User WHERE username='$username' AND password='$password');
$query=( " SELECT username, password FROM users WHERE $username = username AND $password = password");
$stmt = $db->prepare($query);
$stmt->bindParam('username', $username, PDO::PARAM_STR);
$stmt->bindValue('password', $password, PDO::PARAM_STR);
$stmt->execute();
$count = $stmt->rowCount();
$row = $stmt->fetch(PDO::FETCH_ASSOC);
//
//if ($user && password_verify($_POST['pass'], $user['pass']))
if( $user && password_verify($_POST['pass'], $user['pass'])) { //i got this from the php website
header('location:we.php');
$_SESSION['username'] = $row['username'];
$_SESSION['name'] = $row['name'];

} else {
$msg = "Invalid login credentials";
}
} catch (PDOException $e) {
echo "Error : ".$e->getMessage();
}
} else {
$msg = "Both fields are required!";
}
}
?>

What I have tried:

Script modifications and a lot of research