if (!$user) {
        return false;
    }
    $user = $conn->quote($user);
    $hash = $this->hash($pass);

    $sel1 = $conn->query("SELECT ID,name,locale,lastlogin,gender FROM user WHERE (name = $user OR email = $user) AND pass = '$hash'");
    $chk = $sel1->fetch(); /*linea que reporta el error*/
    if ($chk["ID"] != "") {
        $rolesobj = new roles();
        $now = time();
        $_SESSION['userid'] = $chk['ID'];
        $_SESSION['username'] = stripslashes($chk['name']);
        $_SESSION['lastlogin'] = $now;
        $_SESSION['userlocale'] = $chk['locale'];
        $_SESSION['usergender'] = $chk['gender'];
        $_SESSION["userpermissions"] = $rolesobj->getUserRole($chk["ID"]);

        $userid = $_SESSION['userid'];
        $seid = session_id();
        $staylogged = getArrayVal($_POST, 'staylogged');

        if ($staylogged == 1) {
            setcookie("PHPSESSID", "$seid", time() + 14 * 24 * 3600);
        }
        $upd1 = $conn->query("UPDATE user SET lastlogin = '$now' WHERE ID = $userid");
        return true;
    } else {
        return false;
    }
}