PHP MySQL Login

<?php
session_start();
$verhalten = 0;

   	$conn = mysqli_connect($servername, $username,$password,$database);

	if($conn)
	{
		if(!isset($_SESSION["username"]) AND !isset($_GET["page"])) {  
			if($_GET["page"] == "log") {  
				$CurrentUser = mysqli_real_escape_string($conn, $_POST["user"]);  
				$UserPasswort = mysqli_real_escape_string($conn, $_POST["password"]);  
				$sqlQuery = "SELECT passwort FROM `Benutzerliste` WHERE username='$CurrentUser'";  
				$result = mysqli_query($conn, $sqlQuery);
				if($result)
				{	
					if(password_verify($UserPasswort, $result["passwort"]))  
					{
						$_SESSION["username"] = $CurrentUser;  
						$verhalten = 1;
					} else {
						echo "Fehler";  
						$verhalten = 2;
					}
				}
				else
				{
					echo "Error in SQL statement";  
					$vergessen = 2;
				}
			}
		}
	}
?>

<form method="post" action="mslogin.php?page=log">  
				<table cellpadding="20px">  
					<tr>
						<td><font color="919191" size="+1" face="Calibri"><label>Benutzername:</label></font></td>  
						<td><input type="text" name="user"/></td>  
					</tr>
					<tr>
						<td><font color="919191" size="+1" face="Calibri"><label>Passwort:</label></font></td>  
						<td><input type="password" name="password"/></td>  
					</tr>
					<tr>
						<td colspan="2"><input type="submit" /></td>  
					</tr>
				</table>
			</form>