Permission System

// User login validation
$sql = "select usd, pwd, permisos 
        from usuario 
        where usd='$user1' and pwd='$pass1'";
$res = pg_exec($sql);
$row = pg_fetch_row($res);

$_SESSION["_usr"] = $row[0];
$_SESSION["_pass"] = $row[1];
$_SESSION["_categoria"] = $row[2];

// Route based on permission code
if (strcmp($row1[0], "0") == 0) {
    // Redirect to admin index
} else if (strcmp($row1[0], "1") == 0) {
    // Redirect to UR1
}
// ... continued for all permission codes

@session_start();
error_reporting(0);

if (!isset($_SESSION["_usr"])) {
    echo "Tu no estas autentificado - RESTRICCION TOTAL";
    exit();
}

// Session timeout management
$fechaGuardada = $_SESSION["ultimoAcceso"];
$ahora = date("Y-n-j H:i:s");
$_SESSION["ultimoAcceso"] = $ahora;

$categoria = $_SESSION["_categoria"];

// Use password hashing
$hashed = password_hash($password, PASSWORD_ARGON2ID);

// Verify on login
if (password_verify($input_password, $hashed_from_db)) {
    // Authenticate
}