用户仍然可以登录，虽然密码和用户名错误

Question

这个问题让我很困惑为什么用户仍然可以登录，虽然用户名和密码错误。我对这个问题一无所知。我尝试用离子框架构建android 这是我的控制器 **

.controller('LoginCtrl', function ($scope, kaka, $ionicPopup, $state, Varlogin) {
            $scope.loginData = {};
            $scope.proseslogin = function () {
                kaka.loginUser($scope.loginData.username, $scope.loginData.password).success(function (data) {
                    if (data.length > 0) {
                            Varlogin.setObject(data[0]);
                            var alertPopup = $ionicPopup.alert({
                            title: 'Selamat Datang',
                            template: 'Perikasa keadaan motor anda!'
                             });
                            $state.go('app.home');
                    } else {
                        var alertPopup = $ionicPopup.alert({
                            title: 'Login Gagal!',
                            template: 'Periksa Username dan Password anda!'
                        });
                    }
                }).error(function (data) {
                });
            };
            $scope.register = function () {
                $state.go('register');
            };

        })

** 这是我的PHP **

if($function == "login" ){
    $sql = mysqli_query($con, "select * from login where username='$w5'")or die(mysqli_error($con));
    $row = mysqli_fetch_assoc($sql);
    $pass = $row['hash_password'];
    $hash_password = password_verify($w6, $pass);

    if($hash_password == TRUE) {
    $sqlcode = $con->query("select * from login where username='$w5' AND hash_password='$pash' AND aktif='Y'", MYSQLI_USE_RESULT);
    $jsonObj = array();
    while ($result = mysqli_fetch_object($sqlcode)) {
        $jsonObj[] = $result;
        echo "Berhasil";
         }
    }else {
    echo "gagal";
    mysqli_close($con);
    }
}

** 请帮我解决问题