City of TangubUnified Government System · Misamis Occidental
TLS 1.3 · SECURE CONNECTION
Authorized Personnel Only
City of Tangub, Misamis Occidental
Unified Government System
God-Centered City · Una Ang Ginoo
You are signing in to the official command-center platform of the City Government of Tangub.
Records, document tracking, citizen services, budget, treasury, CDRRMO, CPDC, legislative, tourism, and the
Sangguniang Panlungsod digital archive all run through this single secure portal. Every access is logged,
every privileged action is audited.
System Walkthrough9:48
Watch the walkthrough.Auth gate, the unified portal, dashboards, document tracking,
legislative archive, tourism, barangay integration, and the audit trail — narrated end-to-end.
Loads on demand to respect your data; tap the player controls to unmute.
Foundation · Built by Hand, Proven for Decades
31 years in LGU government IT26-year production record on a system the same builder wroteProgrammer + developer in-houseZero external vendor in the path
Built and maintained by Edgardo Dingal Caseñas. Proof, not promise. One of the records
systems Edgar programmed and built has been in continuous production since 2000 — that is
26 unbroken years of real government-grade use, audits, password changes, hardware migrations,
and policy updates. The same design discipline that kept it running carries straight into this Tangub portal.
Bcrypt password hashing — cost-10, per-row salt. Plaintext passwords never stored, never logged.
Zero SQL-injection surface — every database write uses PDO::prepare() with ATTR_EMULATE_PREPARES = false.
Transaction-safe multi-step writes — multi-table changes wrapped in BEGIN / COMMIT with explicit rollback notes.
Role-based access control — every privileged route checks $_SESSION['user'] + user_roles server-side. No client-side trust.
Global auth gate — portal entry requires sign-in. Unauthenticated requests to any non-public URL are 302-redirected here.
Session hardening — HttpOnly + Secure cookies, SameSite=Lax, session ID rotated on privilege change.
Force HTTPS — HSTS at the edge, TLS 1.3 only, no mixed-content fallback.
Audit logs on critical ops — auth, role change, data delete, file upload, monetary movement all written to immutable trail.
RA 10173 compliant (Data Privacy Act of 2012) — citizen data collected only for declared LGU purposes, accessed under RBAC, retained per NPC Circular 16-01.
RA 11032 compliant (Ease of Doing Business / EFGA) — service standards published, complaints mechanism integrated.
Off-site encrypted backups — daily × 30, weekly × 12, monthly × 12. Hardware loss does not equal data loss.
Beneficiary Data Dignity
Sensitive identifiers (PhilSys, bank, biometrics) protected at rest. RBAC gates every read.
Hardware-Fail Tolerance
Encrypted off-site backups on Hostinger schedule + manual snapshots before every schema change.
26-Year Zero-Breach Lineage
The builder’s reference system has run since 2000 with no breach — same design discipline carries here.
Builder Accountability
Designed by an in-house LGU government employee since 1994. No external vendor in the path.
