fix alot

Dockerfile

@@ -0,0 +1,27 @@
+FROM golang:1.21-alpine AS builder
+
+WORKDIR /app
+
+RUN apk add --no-cache git bash
+
+COPY src/go.mod src/go.sum ./
+RUN go mod download
+
+COPY src/ .
+
+RUN go build -o server .
+
+FROM alpine:latest
+
+RUN apk add --no-cache ca-certificates bash
+
+WORKDIR /app
+
+COPY --from=builder /app/server .
+
+COPY --from=builder /app/templates ./templates
+COPY --from=builder /app/uploads ./uploads
+
+EXPOSE 8080
+
+CMD ["./server"]

go.mod

@@ -14,6 +14,7 @@ require (
 	github.com/go-playground/validator/v10 v10.27.0 // indirect
 	github.com/goccy/go-json v0.10.2 // indirect
 	github.com/goccy/go-yaml v1.18.0 // indirect
+	github.com/golang-jwt/jwt/v5 v5.3.1 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect
@@ -31,13 +32,13 @@ require (
 	github.com/ugorji/go/codec v1.3.0 // indirect
 	go.uber.org/mock v0.5.0 // indirect
 	golang.org/x/arch v0.20.0 // indirect
-	golang.org/x/crypto v0.40.0 // indirect
+	golang.org/x/crypto v0.48.0 // indirect
-	golang.org/x/mod v0.25.0 // indirect
+	golang.org/x/mod v0.32.0 // indirect
-	golang.org/x/net v0.42.0 // indirect
+	golang.org/x/net v0.49.0 // indirect
-	golang.org/x/sync v0.16.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.35.0 // indirect
+	golang.org/x/sys v0.41.0 // indirect
-	golang.org/x/text v0.27.0 // indirect
+	golang.org/x/text v0.34.0 // indirect
-	golang.org/x/tools v0.34.0 // indirect
+	golang.org/x/tools v0.41.0 // indirect
 	google.golang.org/protobuf v1.36.9 // indirect
 	gorm.io/driver/sqlite v1.6.0 // indirect
 	gorm.io/gorm v1.31.1 // indirect

go.sum

@@ -22,6 +22,8 @@ github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
 github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
 github.com/goccy/go-yaml v1.18.0 h1:8W7wMFS12Pcas7KU+VVkaiCng+kG8QiFeFwzFb+rwuw=
 github.com/goccy/go-yaml v1.18.0/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA=
+github.com/golang-jwt/jwt/v5 v5.3.1 h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=
+github.com/golang-jwt/jwt/v5 v5.3.1/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
@@ -67,21 +69,35 @@ golang.org/x/arch v0.20.0 h1:dx1zTU0MAE98U+TQ8BLl7XsJbgze2WnNKF/8tGp/Q6c=
 golang.org/x/arch v0.20.0/go.mod h1:bdwinDaKcfZUGpH09BB7ZmOfhalA8lQdzl62l8gGWsk=
 golang.org/x/crypto v0.40.0 h1:r4x+VvoG5Fm+eJcxMaY8CQM7Lb0l1lsmjGBQ6s8BfKM=
 golang.org/x/crypto v0.40.0/go.mod h1:Qr1vMER5WyS2dfPHAlsOj01wgLbsyWtFn/aY+5+ZdxY=
+golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
+golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
 golang.org/x/mod v0.25.0 h1:n7a+ZbQKQA/Ysbyb0/6IbB1H/X41mKgbhfv7AfG/44w=
 golang.org/x/mod v0.25.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
+golang.org/x/mod v0.32.0 h1:9F4d3PHLljb6x//jOyokMv3eX+YDeepZSEo3mFJy93c=
+golang.org/x/mod v0.32.0/go.mod h1:SgipZ/3h2Ci89DlEtEXWUk/HteuRin+HHhN+WbNhguU=
 golang.org/x/net v0.42.0 h1:jzkYrhi3YQWD6MLBJcsklgQsoAcw89EcZbJw8Z614hs=
 golang.org/x/net v0.42.0/go.mod h1:FF1RA5d3u7nAYA4z2TkclSCKh68eSXtiFwcWQpPXdt8=
+golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
+golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
 golang.org/x/sync v0.16.0 h1:ycBJEhp9p4vXvUZNszeOq0kGTPghopOL8q0fq3vstxw=
 golang.org/x/sync v0.16.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.35.0 h1:vz1N37gP5bs89s7He8XuIYXpyY0+QlsKmzipCbUtyxI=
 golang.org/x/sys v0.35.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
+golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/text v0.20.0 h1:gK/Kv2otX8gz+wn7Rmb3vT96ZwuoxnQlY+HlJVj7Qug=
 golang.org/x/text v0.20.0/go.mod h1:D4IsuqiFMhST5bX19pQ9ikHC2GsaKyk/oF+pn3ducp4=
 golang.org/x/text v0.27.0 h1:4fGWRpyh641NLlecmyl4LOe6yDdfaYNrGb2zdfo4JV4=
 golang.org/x/text v0.27.0/go.mod h1:1D28KMCvyooCX9hBiosv5Tz/+YLxj0j7XhWjpSUF7CU=
+golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
+golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
 golang.org/x/tools v0.34.0 h1:qIpSLOxeCYGg9TrcJokLBG4KFA6d795g0xkBkiESGlo=
 golang.org/x/tools v0.34.0/go.mod h1:pAP9OwEaY1CAW3HOmg3hLZC5Z0CCmzjAF2UQMSqNARg=
+golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=
+golang.org/x/tools v0.41.0/go.mod h1:XSY6eDqxVNiYgezAVqqCeihT4j1U2CCsqvH3WhQpnlg=
 google.golang.org/protobuf v1.36.9 h1:w2gp2mA27hUeUzj9Ex9FBjsBm40zfaDtEWow293U7Iw=
 google.golang.org/protobuf v1.36.9/go.mod h1:fuxRtAxBytpl4zzqUh6/eyUujkJdNiuEkXntxiD/uRU=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

src/handlers.go

@@ -2,32 +2,54 @@ package main
 
 import (
 	"fmt"
+	"io"
+	"os"
 	"path/filepath"
 	"time"
 
 	"github.com/gin-gonic/gin"
 	"github.com/google/uuid"
+	"golang.org/x/crypto/bcrypt"
 )
 
 func uploadHandler(c *gin.Context) {
-	file, err := c.FormFile("file")
+	err := c.Request.ParseMultipartForm(0) // unlimited
+	if err != nil {
+		c.JSON(400, gin.H{"error": err.Error()})
+		return
+	}
+
+	src, header, err := c.Request.FormFile("file")
 	if err != nil {
 		c.JSON(400, gin.H{"error": "No file uploaded"})
 		return
 	}
+	defer src.Close()
 
 	id := uuid.New().String()
 	delID := uuid.New().String()
-	// Secure the filename to prevent path traversal attacks
+	cleanName := filepath.Base(header.Filename)
-	cleanName := filepath.Base(file.Filename)
-	storagePath := filepath.Join("uploads", id+"_"+cleanName)
 
-	if err := c.SaveUploadedFile(file, storagePath); err != nil {
+	folderPath := filepath.Join("uploads", id)
-		c.JSON(500, gin.H{"error": "Failed to save file"})
+	os.MkdirAll(folderPath, 0755)
+
+	storagePath := filepath.Join(folderPath, cleanName)
+
+	dst, err := os.Create(storagePath)
+	if err != nil {
+		c.JSON(500, gin.H{"error": err.Error()})
+		return
+	}
+	defer dst.Close()
+
+	written, err := io.Copy(dst, src)
+	fmt.Println("UPLOAD COMPLETE:", cleanName, written, "bytes")
+	if err != nil {
+		c.JSON(500, gin.H{"error": err.Error()})
 		return
 	}
 
-	expiry := time.Now().Add(time.Hour * 24) // Default 24h
+	expiry := time.Now().Add(24 * time.Hour)
 
 	record := FileRecord{
 		ID:                  id,
@@ -42,9 +64,8 @@ func uploadHandler(c *gin.Context) {
 
 	c.JSON(200, gin.H{
 		"id":           id,
-		"deletion_id":  delID,
-		"filename":     cleanName,
 		"download_url": fmt.Sprintf("/f/%s", id),
+		"delete_url":   fmt.Sprintf("/api/file/delete/%s", delID),
 	})
 }
 
@@ -61,7 +82,9 @@ func downloadHandler(c *gin.Context) {
 		return
 	}
 
-	c.FileAttachment(record.Path, record.Filename)
+	//c.FileAttachment(record.Path, record.Filename)
+	c.Header("Content-Disposition", fmt.Sprintf(`inline; filename="%s"`, record.Filename))
+	c.File(record.Path)
 
 	db.Model(&record).Update("download_count", record.DownloadCount+1)
 	if record.DeleteAfterDownload {
@@ -78,3 +101,39 @@ func deleteHandler(c *gin.Context) {
 	performDeletion(&record)
 	c.JSON(200, gin.H{"message": "Deleted successfully"})
 }
+
+func loginHandler(c *gin.Context) {
+
+	username := c.PostForm("username")
+	password := c.PostForm("password")
+
+	var user User
+
+	if err := db.Where("username = ?", username).First(&user).Error; err != nil {
+		c.HTML(401, "login.html", gin.H{"Error": true})
+		return
+	}
+
+	if bcrypt.CompareHashAndPassword(
+		[]byte(user.Password),
+		[]byte(password),
+	) != nil {
+
+		c.HTML(401, "login.html", gin.H{"Error": true})
+		return
+	}
+
+	token, _ := generateToken(username)
+
+	c.SetCookie(
+		"auth",
+		token,
+		86400,
+		"/",
+		"",
+		false,
+		true,
+	)
+
+	c.Redirect(302, "/admin")
+}

src/main.go

@@ -1,10 +1,13 @@
 package main
 
 import (
+	"fmt"
 	"log"
 	"os"
+	"path/filepath"
 
 	"github.com/gin-gonic/gin"
+	"golang.org/x/crypto/bcrypt"
 	"gorm.io/driver/sqlite"
 	"gorm.io/gorm"
 )
@@ -19,24 +22,24 @@ func main() {
 	if err != nil {
 		log.Fatal("DB Connection failed:", err)
 	}
-	db.AutoMigrate(&FileRecord{})
+	db.AutoMigrate(&User{}, &FileRecord{})
+	ensureAdmin()
 
 	go cleanupWorker()
 
 	router := gin.Default()
-	router.MaxMultipartMemory = 100 << 20 // 100 MiB limit
+	router.MaxMultipartMemory = 10 << 30
 	router.LoadHTMLGlob("templates/*")
 
 	// Public Routes
 	router.GET("/", func(c *gin.Context) { c.HTML(200, "index.html", nil) })
-	router.POST("/api/upload", uploadHandler)
 	router.GET("/f/:id", downloadHandler)
-	router.DELETE("/api/file/:del_id", deleteHandler)
+	router.GET("/api/file/delete/:del_id", deleteHandler)
 
-	// Protected Admin Routes
+	router.POST("/api/upload", uploadHandler)
-	admin := router.Group("/admin", gin.BasicAuth(gin.Accounts{
+
-		"admin": "password123", // CHANGE THIS
+	admin := router.Group("/admin")
-	}))
+	admin.Use(authMiddleware())
 
 	admin.GET("/", func(c *gin.Context) {
 		var files []FileRecord
@@ -52,6 +55,65 @@ func main() {
 		c.Redirect(303, "/admin")
 	})
 
+	admin.GET("/download/:id", func(c *gin.Context) {
+		var record FileRecord
+		fmt.Printf("Getting file id: %v\n", c.Param("id"))
+		if err := db.First(&record, "id = ?", c.Param("id")).Error; err != nil {
+			fmt.Println("Admin download failed:", err)
+			c.Header("Content-Type", "text/plain")
+			c.String(418, "File not found")
+			return
+		}
+
+		fmt.Printf("Path: %s, Filename: %s\n", record.Path, record.Filename)
+
+		absPath, err := filepath.Abs(record.Path)
+		if err != nil {
+			c.String(500, "Path error")
+			return
+		}
+
+		fmt.Println("Serving:", absPath)
+		c.Header("Content-Disposition", fmt.Sprintf(`inline; filename="%s"`, record.Filename))
+		c.File(record.Path)
+	})
+
+	admin.GET("/files", func(c *gin.Context) {
+		var files []FileRecord
+		db.Order("created_at desc").Find(&files)
+		c.JSON(200, files)
+	})
+
+	router.POST("/login", loginHandler)
+
+	router.GET("/login", func(c *gin.Context) {
+		c.HTML(200, "login.html", nil)
+	})
+
+	router.GET("/logout", func(c *gin.Context) {
+		c.SetCookie("auth", "", -1, "/", "", false, true)
+		c.Redirect(302, "/")
+	})
+
 	log.Println("Server starting at http://localhost:8080")
 	router.Run(":8080")
 }
+
+func ensureAdmin() {
+	var count int64
+	db.Model(&User{}).Where("username = ?", "admin").Count(&count)
+
+	if count == 0 {
+		hash, _ := bcrypt.GenerateFromPassword(
+			[]byte("change_this_password"),
+			bcrypt.DefaultCost,
+		)
+
+		db.Create(&User{
+			Username: "admin",
+			Password: string(hash),
+		})
+
+		log.Println("Admin user created")
+	}
+}

src/models.go

@@ -13,3 +13,9 @@ type FileRecord struct {
 	Deleted             bool      `json:"deleted"`
 	CreatedAt           time.Time `json:"created_at"`
 }
+
+type User struct {
+	ID       uint   `gorm:"primaryKey"`
+	Username string `gorm:"unique"`
+	Password string
+}

src/utils.go

@@ -1,14 +1,15 @@
 package main
 
 import (
-	"os"
 	"time"
+
+	"github.com/gin-gonic/gin"
+	"github.com/golang-jwt/jwt/v5"
 )
 
 func performDeletion(r *FileRecord) {
 	r.Deleted = true
 	db.Save(r)
-	os.Remove(r.Path)
 }
 
 func cleanupWorker() {
@@ -21,3 +22,37 @@ func cleanupWorker() {
 		}
 	}
 }
+
+var jwtSecret = []byte("SUPER_SECRET_CHANGE_THIS")
+
+func generateToken(username string) (string, error) {
+	token := jwt.NewWithClaims(jwt.SigningMethodHS256, jwt.MapClaims{
+		"username": username,
+	})
+
+	return token.SignedString(jwtSecret)
+}
+
+func authMiddleware() gin.HandlerFunc {
+	return func(c *gin.Context) {
+
+		tokenStr, err := c.Cookie("auth")
+		if err != nil {
+			c.Redirect(302, "/")
+			c.Abort()
+			return
+		}
+
+		token, err := jwt.Parse(tokenStr, func(token *jwt.Token) (interface{}, error) {
+			return jwtSecret, nil
+		})
+
+		if err != nil || !token.Valid {
+			c.Redirect(302, "/")
+			c.Abort()
+			return
+		}
+
+		c.Next()
+	}
+}

templates/admin.html

@@ -3,7 +3,7 @@
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>GhostShare | Admin</title>
+    <title>Admin</title>
     <script src="https://cdn.tailwindcss.com"></script>
     <style>
         * { border-radius: 0 !important; }
@@ -27,6 +27,7 @@
     <header class="mb-8 border-b-4 border-black pb-2 flex justify-between items-end">
         <h1 class="text-3xl font-black uppercase tracking-tighter">System Console</h1>
         <a href="/" class="nav-link text-xs">← BACK TO UPLOADER</a>
+        <a href="/logout" class="nav-link text-xs">LOGOUT</a>
     </header>
 
     <div class="box overflow-x-auto">
@@ -44,7 +45,7 @@
             <tbody>
             {{range .Files}}
             <tr>
-                <td class="font-mono">{{.Filename}}</td>
+                <td class="font-mono"><a href="/admin/download/{{.ID}}" target="_blank">{{.Filename}}</a></td>
                 <td>{{.CreatedAt.Format "Jan 02, 15:04"}}</td>
                 <td>{{.ExpiresAt.Format "Jan 02, 15:04"}}</td>
                 <td>{{.DownloadCount}} {{if .DeleteAfterDownload}}(1-SHOT){{end}}</td>
@@ -61,7 +62,6 @@
                         <button type="submit">TERMINATE</button>
                     </form>
                     {{else}}
-                    -
                     {{end}}
                 </td>
             </tr>
@@ -71,7 +71,7 @@
     </div>
 
     <footer class="mt-4 text-[10px] text-gray-500 uppercase font-bold">
-        Total Records: {{len .Files}} | Database: SQLite
+        Total Records: {{len .Files}}
     </footer>
 </div>
 

templates/download.html

@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta charset="UTF-8">
-    <title>Uploaded | GhostShare</title>
+    <title>send.it</title>
     <script src="https://cdn.tailwindcss.com"></script>
     <style>
         * { border-radius: 0 !important; transition: none !important; }

templates/index.html

@@ -3,19 +3,51 @@
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>GhostShare</title>
+    <title>Send.it</title>
     <script src="https://cdn.tailwindcss.com"></script>
     <style>
         /* The "No-Design" Design */
-        * { border-radius: 0 !important; transition: none !important; }
+        * {
-        body { font-family: sans-serif; background: #fff; color: #000; }
+            border-radius: 0 !important;
+            transition: none !important;
+        }
 
-        .box { border: 2px solid #000; padding: 20px; background: #fff; }
+        body {
-        .input-text { border: 1px solid #000; padding: 4px 8px; background: #fff; width: 100%; }
+            font-family: sans-serif;
+            background: #fff;
+            color: #000;
+        }
 
-        button { border: 2px solid #000; background: #eee; padding: 4px 12px; font-weight: bold; cursor: pointer; }
+        .box {
-        button:hover { background: #ccc; }
+            border: 2px solid #000;
-        button:active { background: #000; color: #fff; }
+            padding: 20px;
+            background: #fff;
+            width: 100%;
+        }
+
+        .input-text {
+            border: 1px solid #000;
+            padding: 4px 8px;
+            background: #fff;
+            width: 100%;
+        }
+
+        button {
+            border: 2px solid #000;
+            background: #eee;
+            padding: 4px 12px;
+            font-weight: bold;
+            cursor: pointer;
+        }
+
+        button:hover {
+            background: #ccc;
+        }
+
+        button:active {
+            background: #000;
+            color: #fff;
+        }
 
         /* Disabled State */
         button:disabled {
@@ -26,83 +58,112 @@
         }
 
         /* New Cancel Style */
-        .btn-cancel { background: #fff; color: #cc0000; border-color: #cc0000; margin-top: 8px; width: 100%; font-size: 10px; }
+        .btn-cancel {
-        .btn-cancel:hover { background: #fee2e2; }
+            background: #fff;
+            color: #cc0000;
+            border-color: #cc0000;
+            margin-top: 8px;
+            width: 100%;
+            font-size: 10px;
+        }
 
-        .drop-zone { border: 2px dashed #000; padding: 40px; text-align: center; background: #f9f9f9; cursor: pointer; }
+        .btn-cancel:hover {
-        .drop-zone.active { background: #eee; border-style: solid; }
+            background: #fee2e2;
+        }
 
-        .burn-option { color: #cc0000; font-weight: bold; font-size: 12px; }
+        .drop-zone {
+            border: 2px dashed #000;
+            padding: 80px;
+            text-align: center;
+            background: #f9f9f9;
+            cursor: pointer;
+        }
+
+        .drop-zone.active {
+            background: #eee;
+            border-style: solid;
+        }
+
+        .burn-option {
+            color: #cc0000;
+            font-weight: bold;
+            font-size: 12px;
+        }
     </style>
 </head>
 <body class="min-h-screen flex items-center justify-center p-4">
 
-<div class="w-full max-w-md box">
+<div class="w-full max-w-[493px] flex flex-col items-end">
-    <header class="mb-6 border-b-2 border-black pb-2 text-center">
-        <h1 class="text-xl font-bold uppercase">Send it</h1>
-    </header>
 
-    <div id="upload-ui">
+    <div class="box">
-        <div id="drop-zone" class="drop-zone mb-4">
+        <header class="mb-6 border-b-2 border-black pb-2 text-center">
-            <input type="file" id="fileInput" class="hidden">
+            <h1 class="text-xl font-bold uppercase">Send it</h1>
+        </header>
 
-            <div id="dz-content">
+        <div id="upload-ui">
-                <span id="dz-text" class="text-sm">Click to select or drop file</span>
+            <div id="drop-zone" class="drop-zone mb-4">
+                <input type="file" id="fileInput" class="hidden">
+
+                <div id="dz-content">
+                    <span id="dz-text" class="text-sm">Click to select or drop file</span>
+                </div>
+
+                <div id="progress-container" class="hidden mt-3 border border-black h-4">
+                    <div id="progress-bar" class="h-full bg-black" style="width:0%"></div>
+                </div>
+
+                <div id="progress-text" class="text-xs mt-1 hidden">0%</div>
             </div>
 
-            <div id="progress-container" class="hidden mt-3 border border-black h-4">
+            <div class="space-y-4">
-                <div id="progress-bar" class="h-full bg-black" style="width:0%"></div>
+                <div class="flex items-center justify-between border-b border-black pb-2">
-            </div>
+                    <label class="text-xs font-bold uppercase">Expire In:</label>
+                    <select id="duration" class="border border-black text-xs p-1">
+                        <option value="1">1 Hour</option>
+                        <option value="24" selected>24 Hours</option>
+                        <option value="168">7 Days</option>
+                    </select>
+                </div>
 
-            <div id="progress-text" class="text-xs mt-1 hidden">0%</div>
+                <div class="flex items-center gap-2">
+                    <input type="checkbox" id="once" class="w-4 h-4 border-black">
+                    <label for="once" class="burn-option uppercase">Burn after</label>
+                </div>
+
+                <button id="uploadBtn" class="w-full" disabled>UPLOAD</button>
+                <button id="cancelBtn" class="btn-cancel hidden">CANCEL UPLOAD</button>
+            </div>
         </div>
 
-        <div class="space-y-4">
+        <div id="success-ui" class="hidden space-y-4">
-            <div class="flex items-center justify-between border-b border-black pb-2">
+            <div class="bg-black text-white p-2 text-xs font-bold">
-                <label class="text-xs font-bold uppercase">Expire In:</label>
+                UPLOAD COMPLETE
-                <select id="duration" class="border border-black text-xs p-1">
-                    <option value="1">1 Hour</option>
-                    <option value="24" selected>24 Hours</option>
-                    <option value="168">7 Days</option>
-                </select>
             </div>
 
-            <div class="flex items-center gap-2">
+            <div>
-                <input type="checkbox" id="once" class="w-4 h-4 border-black">
+                <label class="text-[10px] font-bold block">DOWNLOAD LINK</label>
-                <label for="once" class="burn-option uppercase">Burn after first download</label>
+                <div class="flex">
+                    <input id="res-url" readonly class="input-text text-sm">
+                    <button onclick="copy('res-url')" class="border-l-0">COPY</button>
+                </div>
             </div>
 
-            <button id="uploadBtn" class="w-full" disabled>UPLOAD</button>
+            <div>
-            <button id="cancelBtn" class="btn-cancel hidden">CANCEL UPLOAD</button>
+                <label class="text-[10px] font-bold block">DELETION LINK (PRIVATE)</label>
+                <div class="flex">
+                    <input id="res-del" readonly class="input-text text-sm text-red-600">
+                    <button onclick="copy('res-del')" class="border-l-0">COPY</button>
+                </div>
+            </div>
+
+            <div class="pt-4 flex justify-between">
+                <button onclick="location.reload()" class="text-xs">NEW UPLOAD</button>
+            </div>
         </div>
     </div>
 
-    <div id="success-ui" class="hidden space-y-4">
+    <p class="mt-1 text-[10px] uppercase font-bold text-gray-400">A service by Brammie15</p>
-        <div class="bg-black text-white p-2 text-xs font-bold">
-            UPLOAD COMPLETE
-        </div>
 
-        <div>
-            <label class="text-[10px] font-bold block">DOWNLOAD LINK</label>
-            <div class="flex">
-                <input id="res-url" readonly class="input-text text-sm">
-                <button onclick="copy('res-url')" class="border-l-0">COPY</button>
-            </div>
-        </div>
-
-        <div>
-            <label class="text-[10px] font-bold block">DELETION LINK (PRIVATE)</label>
-            <div class="flex">
-                <input id="res-del" readonly class="input-text text-sm text-red-600">
-                <button onclick="copy('res-del')" class="border-l-0">COPY</button>
-            </div>
-        </div>
-
-        <div class="pt-4 flex justify-between">
-            <button onclick="location.reload()" class="text-xs">NEW UPLOAD</button>
-            <button id="deleteBtn" class="text-xs text-red-600">DELETE NOW</button>
-        </div>
-    </div>
 </div>
 
 <script>
@@ -115,20 +176,22 @@
 
     zone.onclick = () => input.click();
 
-    zone.ondragover = (e) => { e.preventDefault(); zone.classList.add('active'); };
+    zone.ondragover = (e) => {
+        e.preventDefault();
+        zone.classList.add('active');
+    };
     zone.ondragleave = () => zone.classList.remove('active');
     zone.ondrop = (e) => {
         e.preventDefault();
         zone.classList.remove('active');
-        if(e.dataTransfer.files.length) {
+        if (e.dataTransfer.files.length) {
             input.files = e.dataTransfer.files;
             showFile(e.dataTransfer.files[0]);
         }
     };
 
-    // Logic to enable/disable button based on file selection
     input.onchange = () => {
-        if(input.files.length) {
+        if (input.files.length) {
             showFile(input.files[0]);
             uploadBtn.disabled = false;
         } else {
@@ -138,16 +201,16 @@
 
     function showFile(file) {
         document.getElementById('dz-text').innerText =
-            file.name + " (" + Math.round(file.size/1024) + " KB)";
+            file.name + " (" + Math.round(file.size / 1024) + " KB)";
     }
 
     uploadBtn.onclick = () => {
-        if(input.files.length) handleUpload(input.files[0]);
+        if (input.files.length) handleUpload(input.files[0]);
     };
 
     cancelBtn.onclick = (e) => {
         e.stopPropagation();
-        if(currentXhr) {
+        if (currentXhr) {
             currentXhr.abort();
             alert("Upload cancelled.");
             location.reload();
@@ -190,17 +253,10 @@
                 document.getElementById('success-ui').classList.remove('hidden');
 
                 const dlUrl = window.location.origin + data.download_url;
-                const delUrl = `${window.location.origin}/api/file/${data.deletion_id}`;
+                const delUrl = `${window.location.origin}${data.delete_url}`;
 
                 document.getElementById('res-url').value = dlUrl;
                 document.getElementById('res-del').value = delUrl;
-
-                document.getElementById('deleteBtn').onclick = async () => {
-                    if(confirm("Permanently delete?")) {
-                        await fetch(`/api/file/${data.deletion_id}`, { method: 'DELETE' });
-                        location.reload();
-                    }
-                };
             } catch (err) {
                 alert(err.message);
                 location.reload();
@@ -208,7 +264,7 @@
         };
 
         xhr.onerror = () => {
-            if(xhr.statusText !== "abort") {
+            if (xhr.statusText !== "abort") {
                 alert("Upload failed");
                 location.reload();
             }
@@ -224,5 +280,6 @@
         document.execCommand('copy');
     }
 </script>
+<a href="/login" class="fixed bottom-1 right-1 text-[10px] underline">SUDO</a>
 </body>
 </html>

templates/login.html

@@ -0,0 +1,130 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Login</title>
+    <script src="https://cdn.tailwindcss.com"></script>
+
+    <style>
+        * { border-radius: 0 !important; }
+
+        body {
+            font-family: sans-serif;
+            background: #fff;
+            color: #000;
+            padding: 20px;
+        }
+
+        .box {
+            border: 2px solid #000;
+            background: #fff;
+        }
+
+        input {
+            border: 1px solid #000;
+            padding: 6px;
+            font-size: 13px;
+            width: 100%;
+            background: #fff;
+        }
+
+        input:focus {
+            outline: none;
+            background: #f9f9f9;
+        }
+
+        button {
+            border: 1px solid #000;
+            background: #eee;
+            padding: 4px 10px;
+            cursor: pointer;
+            font-size: 12px;
+            font-weight: bold;
+        }
+
+        button:hover {
+            background: #000;
+            color: #fff;
+        }
+
+        .nav-link {
+            font-weight: bold;
+            text-decoration: underline;
+            font-size: 11px;
+        }
+
+        .label {
+            font-size: 10px;
+            font-weight: bold;
+            text-transform: uppercase;
+            margin-bottom: 2px;
+        }
+
+        .error {
+            border: 1px solid #000;
+            background: #ffcccc;
+            font-size: 11px;
+            padding: 4px;
+            margin-bottom: 10px;
+            font-weight: bold;
+        }
+    </style>
+</head>
+<body>
+
+<div class="max-w-md mx-auto">
+
+    <header class="mb-8 border-b-4 border-black pb-2 flex justify-between items-end">
+        <h1 class="text-3xl font-black uppercase tracking-tighter">
+            System Access
+        </h1>
+
+        <a href="/" class="nav-link">
+            ← BACK
+        </a>
+    </header>
+
+
+    <div class="box p-4">
+
+        {{if .Error}}
+        <div class="error">
+            ACCESS DENIED
+        </div>
+        {{end}}
+
+        <form method="POST" action="/login" class="space-y-3">
+
+            <div>
+                <div class="label">Username</div>
+                <input
+                        name="username"
+                        required
+                        autocomplete="username"
+                >
+            </div>
+
+            <div>
+                <div class="label">Password</div>
+                <input
+                        type="password"
+                        name="password"
+                        required
+                        autocomplete="current-password"
+                >
+            </div>
+
+            <div class="pt-2">
+                <button type="submit">
+                    AUTHENTICATE
+                </button>
+            </div>
+
+        </form>
+
+    </div>
+</div>
+
+</body>
+</html>