Password updation

where is the call to password_hash()? you shouldn’t be storing passwords in plain text.