Comment mieux sécuriser sa connexion

<?php 
    session_start();
 //   require_once 'config.php';
  require_once 'config.php';
    if(!empty($_POST['pseudo']) && !empty($_POST['password']))
    {
        $pseudo =($_POST['pseudo']);
        $password = ($_POST['password']);
$check = $bdd->prepare('SELECT pseudo, email,id, password FROM utilisateurs WHERE pseudo = ?');
        $check->execute(array($pseudo));
        $data = $check->fetch();
       // $row = $check->rowCount();
        //if($row == 1)
        //{
			if(!empty($data)) {
            if(password_verify($password, $data['password']))
                {
                 $_SESSION['user'] = array('id'=>$data['id'], 'pseudo'=>$data['pseudo'], 'email'=>$data['email']) ;
                   $_SESSION['pseudo'] = $data['pseudo'];
                   $_SESSION['email'] = $data['email'];
                      header('Location: accueil-peche-perle.php?pseudo='.$_SESSION['pseudo']);
                    die();
                }else{ header('Location: connexion-site.php?login_err=password'); die(); }
        }else{ header('Location: connexion-site.php?login_err=already'); die(); }
    }