Official Seal of the City of Pagadian, Zamboanga del Sur — founded 1937, chartered as city 1969
City of Pagadian Unified Citizen Portal · Zamboanga del Sur
TLS 1.3 · SECURE CONNECTION
Authorized Personnel Only

City of Pagadian, Zamboanga del Sur Unified Citizen Portal

Hong Kong of the South

You are signing in to the official command-center platform of the Government of the City of Pagadian. Records, document tracking, citizen services, budget, treasury, CDRRMO, CPDC, legislative, and the Sangguniang Panlungsod digital archive all run through this single secure portal. Every access is logged, every privileged action is audited.

System Walkthrough 10:46
Watch the walkthrough. Auth gate, command center, records, document tracking, CDRRMO, CPDC, the legislative archive, and the audit trail — narrated by the builder. Loads on demand to respect your data; tap the player controls to unmute.

Foundation · Ligon, Proven, Built by Hand

31 years in Pagadian City government 26-year production record on a system he wrote Programmer + developer in-house Zero external vendor in the path

Built and maintained by Edgardo Dingal Caseñas, an in-house Pagadian City government employee with a career arc that explains why this portal behaves the way it does: three years at the City Accounting Office as a casual employee (where the discipline for money, ledgers, and audit trails came from), then twenty-eight years — and counting — at the Office of the Secretary to the Sangguniang Panlungsod of Pagadian, the office where every legislative record, decision, and approval gets handled. Public servant since 1994.

Proof, not promise. One of the records systems Edgar programmed and built has been in continuous production since 2000 — that is 26 unbroken years of real, government-grade use, audits, password changes, hardware migrations, and policy updates. The same design discipline that kept it running carries straight into this portal. He does not just talk about computerization — naa nay working proof.

Technical foundation: trained informally first by his amigo, kababata, and Sto. Niño Village, Pagadian City silingan Mario Luisma — the chess partner from their high-school days, who later introduced Edgar to programming long before any classroom did. In 2000, sent by the City of Pagadian to a National Computer Center seminar in Zamboanga City — out of 33 participants from across the Philippines, Edgar finished in the top 3 of the final exam. Sent again in 2019 to a paperless-system seminar in Zambales, which fed directly into Pagadian's Paperless Session Program for the Sangguniang Panlungsod. Bentley-trained CAD / structural designer (Revit / Civil 3D / Archicad / STAAD Pro), with certifications across low-rise, mid-rise, and high-rise building design. Lead designer of the adopted Official Sangguniang Panlungsod Emblem and Seal. Builder of the Pagadian Sangguniang Panlungsod Legislative Tracking System — the 26-year reference above — and most recently of the PACIGEA member portal, additional proof that the skill is current, not nostalgic.

“Makapasalig ko: kining sistema gibuhat aron ligon, secure, stable, ug long-term. Dili lang saad — naa nay working proof. No external vendors in the path. No shortcuts. No surprises.”

Security & Compliance — Built In, Not Bolted On

  • Bcrypt password hashing — cost-10, per-row salt. Plaintext passwords never stored, never logged.
  • Zero SQL-injection surface — every database write uses PDO::prepare() with ATTR_EMULATE_PREPARES = false.
  • Transaction-safe multi-step writes — multi-table changes wrapped in BEGIN / COMMIT with explicit rollback notes.
  • Role-based access control — every privileged route checks $_SESSION['user'] + user_roles server-side. No client-side trust.
  • Global auth gate — portal entry requires sign-in. Unauthenticated requests to any non-public URL are 302-redirected here.
  • Session hardeningHttpOnly + Secure cookies, SameSite=Lax, session ID rotated on privilege change.
  • Force HTTPS — HSTS at the edge, TLS 1.3 only, no mixed-content fallback.
  • Audit logs on critical ops — auth, role change, data delete, file upload, monetary movement all written to immutable trail.
  • RA 10173 compliant (Data Privacy Act of 2012) — citizen data collected only for declared LGU purposes, accessed under RBAC, retained per NPC Circular 16-01.
  • RA 11032 compliant (Ease of Doing Business / EFGA) — service standards published, complaints mechanism integrated.
  • Off-site encrypted backups — daily × 30, weekly × 12, monthly × 12. Hardware loss does not equal data loss.
Beneficiary Data Dignity

Sensitive identifiers (PhilSys, bank, biometrics) protected at rest. RBAC gates every read.

Hardware-Fail Tolerance

Encrypted GPG off-site backups on Hostinger schedule + manual snapshots before every schema change.

26-Year Zero-Breach Lineage

SP Legislative Tracking System has run since 2000 with no breach — same design discipline carries here.

Builder Accountability

Designed by an in-house Pagadian City government employee since 1994. No external vendor in the path.

PHP 8.3MariaDBPDO PreparedBcryptCSRF HSTSTLS 1.3RA 10173RA 11032Hostinger
Edgardo Dingal Caseñas · Builder · gov’t employee since 1994 · casenasinnovates2025@gmail.com