Look, Mr.coder. No disrespect, but if that code is going to production environment, then please ask somebody else to do it. I know we all have to start somewhere, but this is not where production security code should start. Having that said, let's address your question.
First of all, you're using
hash_pbkdf2, which is a PHP 5.5 function. Since you're already coding for PHP 5.5, it's better to use the
password_hash API. You only need two inputs for
password_hash; the password, and the algorithm (
PASSWORD_BCRYPT is recommended). The output is one string containing everything you need (the automatically-generated salt, the password, the algorithm and the iterations). You take that string and store it in the database.
Second, you're using one iteration. What's the point? You want to make the process as slow as possible, while keeping it as usable as possible. One iteration is extremely low. Start with 1000 as a bare minimum.
Third, what's with the gigantic salt? Anything higher than 128 bits (16 bytes) is unnecessary.
For verification (login), you only need one method;
password_verify. You give the hash string (from the database), and the password. The output is either
true for successful verification, or
false for failed verification. Here's an example:
$hashString_ToTheDB = password_hash($userPass, PASSWORD_BCRYPT);
$isCorrectPassword = password_verify($userPass, $hashString_FromTheDB);