diff --git a/bot/helper/database.py b/bot/helper/database.py
index d5fb403..117b8c3 100644
--- a/bot/helper/database.py
+++ b/bot/helper/database.py
@@ -12,6 +12,7 @@ def __init__(self):
         self.collection = self.db["playlist"]
         self.config = self.db["config"]
         self.files = self.db["files"]
+        self.verifications = self.db["verifications"]
 
     async def create_folder(self, parent_id, folder_name, thumbnail):
         folder = {"parent_folder": parent_id, "name": folder_name,
@@ -123,3 +124,18 @@ async def search_tgfiles(self, id, query, page=1, per_page=50):
     
     async def add_btgfiles(self, data):
         result = self.files.insert_many(data)
+
+    async def save_verification(self, visitor_id, ip_address, user_agent, verified_at, expires_at):
+        payload = {
+            "visitor_id": visitor_id,
+            "ip_address": ip_address,
+            "user_agent": user_agent,
+            "verified_at": verified_at,
+            "expires_at": expires_at,
+        }
+        result = self.verifications.update_one(
+            {"visitor_id": visitor_id},
+            {"$set": payload},
+            upsert=True
+        )
+        return result.acknowledged
diff --git a/bot/server/render_template.py b/bot/server/render_template.py
index 3a4c964..d5cec07 100644
--- a/bot/server/render_template.py
+++ b/bot/server/render_template.py
@@ -39,6 +39,8 @@ async def render_page(
     redirect_url="",
     msg="",
     chat_id="",
+    verify_nonce="",
+    verify_wait=0,
 ):
     theme = await db.get_variable("theme")
     if theme is None or theme == "":
@@ -51,6 +53,8 @@ async def render_page(
                 .replace("<!-- Error -->", msg or "")
                 .replace("<!-- Theme -->", theme.lower())
                 .replace("<!-- RedirectURL -->", redirect_url)
+                .replace("<!-- VerifyNonce -->", verify_nonce)
+                .replace("<!-- VerifyWait -->", str(verify_wait))
             )
     elif route == "home":
         async with aiopen(ospath.join(tpath, "home.html"), "r") as f:
diff --git a/bot/server/stream_routes.py b/bot/server/stream_routes.py
index 1356f1e..ab23f4d 100644
--- a/bot/server/stream_routes.py
+++ b/bot/server/stream_routes.py
@@ -3,6 +3,7 @@
 import math
 import mimetypes
 import secrets
+import time
 from aiohttp import web
 from aiohttp.http_exceptions import BadStatusLine
 from bot.helper.chats import get_chats, post_playlist, posts_chat, posts_db_file
@@ -24,19 +25,59 @@
 
 routes = web.RouteTableDef()
 db = Database()
+VERIFICATION_WINDOW_SECONDS = 24 * 60 * 60
+
+
+def is_verified_session(session):
+    username = session.get('user')
+    verified_at = session.get('verified_at')
+    verified_user_id = session.get('verified_user_id')
+    if not username or not verified_at or not verified_user_id:
+        return False
+    return (int(time.time()) - int(verified_at)) < VERIFICATION_WINDOW_SECONDS
+
+
+def get_client_ip(request):
+    forwarded_for = request.headers.get('X-Forwarded-For', '')
+    if forwarded_for:
+        return forwarded_for.split(',')[0].strip()
+    return request.headers.get('X-Real-IP') or request.remote or 'unknown'
+
+
+async def get_verified_user(request):
+    session = await get_session(request)
+    if is_verified_session(session):
+        return session, session.get('user')
+    session.pop('user', None)
+    session.pop('verified_at', None)
+    session['redirect_url'] = request.path_qs
+    raise web.HTTPFound('/login')
 
 
 @routes.get('/login')
 async def login_form(request):
     session = await get_session(request)
+    if is_verified_session(session):
+        redirect_url = session.pop('redirect_url', '/')
+        raise web.HTTPFound(redirect_url)
     redirect_url = session.get('redirect_url', '/')
-    return web.Response(text=await render_page(None, None, route='login', redirect_url=redirect_url), content_type='text/html')
+    verify_nonce = secrets.token_urlsafe(24)
+    verify_wait = secrets.randbelow(16) + 10
+    session['verify_nonce'] = verify_nonce
+    session['verify_wait'] = verify_wait
+    session['verify_started_at'] = None
+    return web.Response(
+        text=await render_page(
+            None, None, route='login', redirect_url=redirect_url, verify_nonce=verify_nonce, verify_wait=verify_wait
+        ),
+        content_type='text/html'
+    )
 
 
 @routes.post('/login')
 async def login_route(request):
     session = await get_session(request)
-    if 'user' in session:
+    if is_verified_session(session):
         return web.HTTPFound('/')
     data = await request.post()
     username = data.get('username')
@@ -44,6 +85,9 @@ async def login_route(request):
     error_message = None
     if (username == Telegram.USERNAME and password == Telegram.PASSWORD) or (username == Telegram.ADMIN_USERNAME and password == Telegram.ADMIN_PASSWORD):
         session['user'] = username
+        now = int(time.time())
+        session['verified_at'] = now
+        session['verified_user_id'] = f"admin:{username}"
         if 'redirect_url' not in session:
             session['redirect_url'] = '/'
         redirect_url = session['redirect_url']
@@ -51,20 +95,88 @@ async def login_route(request):
         return web.HTTPFound(redirect_url)
     else:
         error_message = "Invalid username or password"
-    return web.Response(text=await render_page(None, None, route='login', msg=error_message), content_type='text/html')
+    verify_nonce = secrets.token_urlsafe(24)
+    verify_wait = secrets.randbelow(16) + 10
+    session['verify_nonce'] = verify_nonce
+    session['verify_wait'] = verify_wait
+    session['verify_started_at'] = None
+    return web.Response(
+        text=await render_page(None, None, route='login', msg=error_message, verify_nonce=verify_nonce, verify_wait=verify_wait),
+        content_type='text/html'
+    )
+
+
+@routes.post('/verify/start')
+async def verification_start_route(request):
+    session = await get_session(request)
+    if is_verified_session(session):
+        return web.json_response({"ok": True, "already_verified": True})
+    data = await request.post()
+    nonce = data.get('nonce')
+    if not nonce or nonce != session.get('verify_nonce'):
+        return web.json_response({"ok": False, "error": "Invalid verification session"}, status=400)
+    session['verify_started_at'] = int(time.time())
+    return web.json_response({"ok": True, "wait_seconds": int(session.get('verify_wait', 0))})
+
+
+@routes.post('/verify-access')
+async def verify_access_route(request):
+    session = await get_session(request)
+    if is_verified_session(session):
+        return web.HTTPFound('/')
+    data = await request.post()
+    nonce = data.get('nonce')
+    if not nonce or nonce != session.get('verify_nonce'):
+        return web.HTTPForbidden(text='Verification failed. Please restart verification.')
+    wait_seconds = int(session.get('verify_wait') or 0)
+    verify_started_at = session.get('verify_started_at')
+    if not verify_started_at:
+        return web.HTTPForbidden(text='Verification is incomplete. Please open the ad first.')
+    now = int(time.time())
+    if now - int(verify_started_at) < wait_seconds:
+        return web.HTTPForbidden(text='Verification timer not finished yet.')
+
+    visitor_id = session.get('visitor_id')
+    if not visitor_id:
+        visitor_id = secrets.token_urlsafe(18)
+        session['visitor_id'] = visitor_id
+    user_agent = request.headers.get('User-Agent', '')
+    ip_address = get_client_ip(request)
+    expires_at = now + VERIFICATION_WINDOW_SECONDS
+    saved = await db.save_verification(
+        visitor_id=visitor_id,
+        ip_address=ip_address,
+        user_agent=user_agent,
+        verified_at=now,
+        expires_at=expires_at,
+    )
+    if not saved:
+        raise web.HTTPInternalServerError(text='Unable to save verification state.')
+
+    session['user'] = Telegram.USERNAME
+    session['verified_at'] = now
+    session['verified_user_id'] = visitor_id
+    session.pop('verify_nonce', None)
+    session.pop('verify_wait', None)
+    session.pop('verify_started_at', None)
+    redirect_url = data.get('redirect_url') or session.get('redirect_url', '/')
+    session.pop('redirect_url', None)
+    return web.HTTPFound(redirect_url)
 
 
 @routes.post('/logout')
 async def logout_route(request):
     session = await get_session(request)
     session.pop('user', None)
+    session.pop('verified_at', None)
+    session.pop('verified_user_id', None)
     return web.HTTPFound('/login')
 
 
 @routes.post('/create')
 async def create_route(request):
-    session = await get_session(request)
-    if (username := session.get('user')) != Telegram.ADMIN_USERNAME:
+    _, username = await get_verified_user(request)
+    if username != Telegram.ADMIN_USERNAME:
         return web.json_response({'msg': 'Who the hell you are'})
     data = await request.post()
     folderName = data.get('folderName')
@@ -80,8 +192,8 @@ async def create_route(request):
 
 @routes.post('/delete')
 async def delete_route(request):
-    session = await get_session(request)
-    if (username := session.get('user')) != Telegram.ADMIN_USERNAME:
+    _, username = await get_verified_user(request)
+    if username != Telegram.ADMIN_USERNAME:
         return web.json_response({'msg': 'Who the hell you are'})
     data = await request.json()
     id = data.get('delete_id')
@@ -96,8 +208,8 @@ async def delete_route(request):
 
 @routes.post('/edit')
 async def editFolder_route(request):
-    session = await get_session(request)
-    if (username := session.get('user')) != Telegram.ADMIN_USERNAME:
+    _, username = await get_verified_user(request)
+    if username != Telegram.ADMIN_USERNAME:
         return web.json_response({'msg': 'Who the hell you are'})
     data = await request.post()
     folderName = data.get('folderName')
@@ -115,8 +227,8 @@ async def editFolder_route(request):
 
 @routes.post('/edit_post')
 async def editPost_route(request):
-    session = await get_session(request)
-    if (username := session.get('user')) != Telegram.ADMIN_USERNAME:
+    _, username = await get_verified_user(request)
+    if username != Telegram.ADMIN_USERNAME:
         return web.json_response({'msg': 'Who the hell you are'})
     data = await request.post()
     fileName = data.get('fileName')
@@ -134,8 +246,8 @@ async def editPost_route(request):
 
 @routes.get('/searchDbFol')
 async def searchDbFolder_route(request):
-    session = await get_session(request)
-    if (username := session.get('user')) != Telegram.ADMIN_USERNAME:
+    _, username = await get_verified_user(request)
+    if username != Telegram.ADMIN_USERNAME:
         return web.json_response({'msg': 'Who the hell you are'})
     query = request.query.get('query', '')
     folder_names = await db.search_DbFolder(query)
@@ -144,6 +256,9 @@ async def searchDbFolder_route(request):
 
 @routes.post('/send')
 async def send_route(request):
+    _, username = await get_verified_user(request)
+    if username != Telegram.ADMIN_USERNAME:
+        return web.json_response({'msg': 'Who the hell you are'})
     data = await request.post()
     chat_id = data.get('chatId')
     chat_id = f"-100{chat_id}"
@@ -178,8 +293,8 @@ async def send_route(request):
 
 @routes.get('/reload')
 async def reload_route(request):
-    session = await get_session(request)
-    if (username := session.get('user')) != Telegram.ADMIN_USERNAME:
+    _, username = await get_verified_user(request)
+    if username != Telegram.ADMIN_USERNAME:
         return web.json_response({'msg': 'Who the hell you are'})
 
     chat_id = request.query.get('chatId', '')
@@ -193,8 +308,8 @@ async def reload_route(request):
 
 @routes.post('/config')
 async def editConfig_route(request):
-    session = await get_session(request)
-    if (username := session.get('user')) != Telegram.ADMIN_USERNAME:
+    _, username = await get_verified_user(request)
+    if username != Telegram.ADMIN_USERNAME:
         return web.json_response({'msg': 'Who the hell you are'})
     data = await request.post()
     channel = data.get('channel')
@@ -208,109 +323,89 @@ async def editConfig_route(request):
 
 @routes.get('/')
 async def home_route(request):
-    session = await get_session(request)
-    if username := session.get('user'):
-        try:
-            channels = await get_chats()
-            playlists = await db.get_Dbfolder()
-            phtml = await posts_chat(channels)
-            dhtml = await post_playlist(playlists)
-            is_admin = username == Telegram.ADMIN_USERNAME
-            return web.Response(text=await render_page(None, None, route='home', html=phtml, playlist=dhtml, is_admin=is_admin), content_type='text/html')
-        except Exception as e:
-            logging.critical(e.with_traceback(None))
-            raise web.HTTPInternalServerError(text=str(e)) from e
-    else:
-        session['redirect_url'] = request.path_qs
-        return web.HTTPFound('/login')
+    _, username = await get_verified_user(request)
+    try:
+        channels = await get_chats()
+        playlists = await db.get_Dbfolder()
+        phtml = await posts_chat(channels)
+        dhtml = await post_playlist(playlists)
+        is_admin = username == Telegram.ADMIN_USERNAME
+        return web.Response(text=await render_page(None, None, route='home', html=phtml, playlist=dhtml, is_admin=is_admin), content_type='text/html')
+    except Exception as e:
+        logging.critical(e.with_traceback(None))
+        raise web.HTTPInternalServerError(text=str(e)) from e
 
 
 @routes.get('/playlist')
 async def playlist_route(request):
-    session = await get_session(request)
-    if username := session.get('user'):
-        try:
-            parent_id = request.query.get('db')
-            page = request.query.get('page', '1')
-            playlists = await db.get_Dbfolder(parent_id, page=page)
-            files = await db.get_dbFiles(parent_id, page=page)
-            text = await db.get_info(parent_id)
-            dhtml = await post_playlist(playlists)
-            dphtml = await posts_db_file(files)
-            is_admin = username == Telegram.ADMIN_USERNAME
-            return web.Response(text=await render_page(parent_id, None, route='playlist', playlist=dhtml, database=dphtml, msg=text, is_admin=is_admin), content_type='text/html')
-        except Exception as e:
-            logging.critical(e.with_traceback(None))
-            raise web.HTTPInternalServerError(text=str(e)) from e
-    else:
-        session['redirect_url'] = request.path_qs
-        return web.HTTPFound('/login')
+    _, username = await get_verified_user(request)
+    try:
+        parent_id = request.query.get('db')
+        page = request.query.get('page', '1')
+        playlists = await db.get_Dbfolder(parent_id, page=page)
+        files = await db.get_dbFiles(parent_id, page=page)
+        text = await db.get_info(parent_id)
+        dhtml = await post_playlist(playlists)
+        dphtml = await posts_db_file(files)
+        is_admin = username == Telegram.ADMIN_USERNAME
+        return web.Response(text=await render_page(parent_id, None, route='playlist', playlist=dhtml, database=dphtml, msg=text, is_admin=is_admin), content_type='text/html')
+    except Exception as e:
+        logging.critical(e.with_traceback(None))
+        raise web.HTTPInternalServerError(text=str(e)) from e
 
 
 @routes.get('/search/db/{parent}')
 async def dbsearch_route(request):
-    session = await get_session(request)
-    if username := session.get('user'):
-        parent = request.match_info['parent']
-        page = request.query.get('page', '1')
-        query = request.query.get('q')
-        is_admin = username == Telegram.ADMIN_USERNAME
-        try:
-            files = await db.search_dbfiles(id=parent, page=page, query=query)
-            dphtml = await posts_db_file(files)
-            name = await db.get_info(parent)
-            text = f"{name} - {query}"
-            return web.Response(text=await render_page(parent, None, route='playlist', database=dphtml, msg=text, is_admin=is_admin), content_type='text/html')
-        except Exception as e:
-            logging.critical(e.with_traceback(None))
-            raise web.HTTPInternalServerError(text=str(e)) from e
-    else:
-        session['redirect_url'] = request.path_qs
-        return web.HTTPFound('/login')
+    _, username = await get_verified_user(request)
+    parent = request.match_info['parent']
+    page = request.query.get('page', '1')
+    query = request.query.get('q')
+    is_admin = username == Telegram.ADMIN_USERNAME
+    try:
+        files = await db.search_dbfiles(id=parent, page=page, query=query)
+        dphtml = await posts_db_file(files)
+        name = await db.get_info(parent)
+        text = f"{name} - {query}"
+        return web.Response(text=await render_page(parent, None, route='playlist', database=dphtml, msg=text, is_admin=is_admin), content_type='text/html')
+    except Exception as e:
+        logging.critical(e.with_traceback(None))
+        raise web.HTTPInternalServerError(text=str(e)) from e
 
 
 @routes.get('/channel/{chat_id}')
 async def channel_route(request):
-    session = await get_session(request)
-    if username := session.get('user'):
-        chat_id = request.match_info['chat_id']
-        chat_id = f"-100{chat_id}"
-        page = request.query.get('page', '1')
-        is_admin = username == Telegram.ADMIN_USERNAME
-        try:
-            posts = await get_files(chat_id, page=page)
-            phtml = await posts_file(posts, chat_id)
-            chat = await StreamBot.get_chat(int(chat_id))
-            return web.Response(text=await render_page(None, None, route='index', html=phtml, msg=chat.title, chat_id=chat_id.replace("-100", ""), is_admin=is_admin), content_type='text/html')
-        except Exception as e:
-            logging.critical(e.with_traceback(None))
-            raise web.HTTPInternalServerError(text=str(e)) from e
-    else:
-        session['redirect_url'] = request.path_qs
-        return web.HTTPFound('/login')
+    _, username = await get_verified_user(request)
+    chat_id = request.match_info['chat_id']
+    chat_id = f"-100{chat_id}"
+    page = request.query.get('page', '1')
+    is_admin = username == Telegram.ADMIN_USERNAME
+    try:
+        posts = await get_files(chat_id, page=page)
+        phtml = await posts_file(posts, chat_id)
+        chat = await StreamBot.get_chat(int(chat_id))
+        return web.Response(text=await render_page(None, None, route='index', html=phtml, msg=chat.title, chat_id=chat_id.replace("-100", ""), is_admin=is_admin), content_type='text/html')
+    except Exception as e:
+        logging.critical(e.with_traceback(None))
+        raise web.HTTPInternalServerError(text=str(e)) from e
 
 
 @routes.get('/search/{chat_id}')
 async def search_route(request):
-    session = await get_session(request)
-    if username := session.get('user'):
-        chat_id = request.match_info['chat_id']
-        chat_id = f"-100{chat_id}"
-        page = request.query.get('page', '1')
-        query = request.query.get('q')
-        is_admin = username == Telegram.ADMIN_USERNAME
-        try:
-            posts = await search(chat_id, page=page, query=query)
-            phtml = await posts_file(posts, chat_id)
-            chat = await StreamBot.get_chat(int(chat_id))
-            text = f"{chat.title} - {query}"
-            return web.Response(text=await render_page(None, None, route='index', html=phtml, msg=text, chat_id=chat_id.replace("-100", ""), is_admin=is_admin), content_type='text/html')
-        except Exception as e:
-            logging.critical(e.with_traceback(None))
-            raise web.HTTPInternalServerError(text=str(e)) from e
-    else:
-        session['redirect_url'] = request.path_qs
-        return web.HTTPFound('/login')
+    _, username = await get_verified_user(request)
+    chat_id = request.match_info['chat_id']
+    chat_id = f"-100{chat_id}"
+    page = request.query.get('page', '1')
+    query = request.query.get('q')
+    is_admin = username == Telegram.ADMIN_USERNAME
+    try:
+        posts = await search(chat_id, page=page, query=query)
+        phtml = await posts_file(posts, chat_id)
+        chat = await StreamBot.get_chat(int(chat_id))
+        text = f"{chat.title} - {query}"
+        return web.Response(text=await render_page(None, None, route='index', html=phtml, msg=text, chat_id=chat_id.replace("-100", ""), is_admin=is_admin), content_type='text/html')
+    except Exception as e:
+        logging.critical(e.with_traceback(None))
+        raise web.HTTPInternalServerError(text=str(e)) from e
 
 
 @routes.get('/api/thumb/{chat_id}', allow_head=True)
@@ -327,27 +422,23 @@ async def get_thumbnail(request):
 
 @routes.get('/watch/{chat_id}', allow_head=True)
 async def stream_handler_watch(request: web.Request):
-    session = await get_session(request)
-    if username := session.get('user'):
-        try:
-            chat_id = request.match_info['chat_id']
-            chat_id = f"-100{chat_id}"
-            message_id = request.query.get('id')
-            secure_hash = request.query.get('hash')
-            return web.Response(text=await render_page(message_id, secure_hash, chat_id=chat_id), content_type='text/html')
-        except InvalidHash as e:
-            raise web.HTTPForbidden(text=e.message) from e
-        except FIleNotFound as e:
-            db.delete_file(chat_id=chat_id, msg_id=message_id, hash=secure_hash)
-            raise web.HTTPNotFound(text=e.message) from e
-        except (AttributeError, BadStatusLine, ConnectionResetError):
-            pass
-        except Exception as e:
-            logging.critical(e.with_traceback(None))
-            raise web.HTTPInternalServerError(text=str(e)) from e
-    else:
-        session['redirect_url'] = request.path_qs
-        return web.HTTPFound('/login')
+    await get_verified_user(request)
+    try:
+        chat_id = request.match_info['chat_id']
+        chat_id = f"-100{chat_id}"
+        message_id = request.query.get('id')
+        secure_hash = request.query.get('hash')
+        return web.Response(text=await render_page(message_id, secure_hash, chat_id=chat_id), content_type='text/html')
+    except InvalidHash as e:
+        raise web.HTTPForbidden(text=e.message) from e
+    except FIleNotFound as e:
+        db.delete_file(chat_id=chat_id, msg_id=message_id, hash=secure_hash)
+        raise web.HTTPNotFound(text=e.message) from e
+    except (AttributeError, BadStatusLine, ConnectionResetError):
+        pass
+    except Exception as e:
+        logging.critical(e.with_traceback(None))
+        raise web.HTTPInternalServerError(text=str(e)) from e
 
 
 @routes.get('/{chat_id}/{encoded_name}', allow_head=True)
diff --git a/bot/server/template/home.html b/bot/server/template/home.html
index 3ab433d..9a203e9 100644
--- a/bot/server/template/home.html
+++ b/bot/server/template/home.html
@@ -252,5 +252,5 @@
     <div class="admin-only modal fade" id="createFolderModal" aria-labelledby="createFolderModalLabel" aria-hidden="true"><div class="modal-dialog modal-dialog-centered"><div class="modal-content"><div class="modal-body"><form action="/create" method="post"><label for="folderName" class="form-label">Folder Name</label><input type="text" class="form-control" id="folderName" name="folderName" placeholder="Enter folder name"><label for="thumbnail" class="form-label mt-3">Thumbnail</label><input type="text" class="form-control" id="thumbnail" name="thumbnail" placeholder="Thumbnail url"><br><input type="hidden" id="parent_dir" name="parent_dir" readonly><div class="d-flex justify-content-end gap-2"><button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button><button type="submit" class="btn btn-primary">Create</button></div></form></div></div></div></div>
     <div class="admin-only modal fade" id="editFolderModal" aria-labelledby="editFolderModalLabel" aria-hidden="true"><div class="modal-dialog modal-dialog-centered"><div class="modal-content"><div class="modal-body"><form action="/edit" method="post"><input type="hidden" id="edit_folder_id" name="folder_id" value=""><input type="hidden" id="edit_parent" name="parent" value=""><label for="edit_folderName">Folder Name:</label><input type="text" class="form-control" id="edit_folderName" name="folderName" value=""><br><label for="edit_thumbnail">Thumbnail:</label><input type="text" class="form-control" id="edit_thumbnail" name="thumbnail" value=""><br><div class="d-flex justify-content-end gap-2"><button type="submit" class="btn btn-primary" onclick="submitEditForm()">Submit</button><button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button><button type="button" class="btn btn-danger" onclick="deleteItem()">Delete</button></div></form></div></div></div></div>
     <nav class="navbar navbar-expand-lg navbar-dark ott-navbar"><div class="ott-shell container-fluid py-2"><a class="navbar-brand brand-wrap" href="/"><span class="brand-mark"><img src="https://homies-theta.vercel.app/logo.png" alt="Logo"></span><span class="brand-copy"><small>OTT Streaming</small><strong>360Hub</strong></span></a><button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#mainNavbar"><span class="navbar-toggler-icon"></span></button><div class="collapse navbar-collapse" id="mainNavbar"><ul class="navbar-nav ms-auto align-items-lg-center gap-lg-2 mb-2 mb-lg-0"><li class="nav-item"><a class="nav-link active" href="/">Home</a></li><li class="nav-item"><a class="nav-link" href="https://app.360hub.fun">Movies</a></li><li class="nav-item"><a class="nav-link" href="https://app.360hub.fun">Series</a></li><li class="nav-item"><a class="nav-link" href="https://t.me/Offical360Hub" target="_blank">Community</a></li></ul></div><div class="d-flex flex-wrap gap-2 align-items-center ms-lg-3"><button type="button" class="admin-only btn btn-secondary btn-sm" data-bs-toggle="modal" data-bs-target="#editConfigModal"><i class="bi bi-sliders"></i></button><form action="/reload" method="get" role="reload" class="admin-only"><button type="submit" class="btn btn-secondary btn-sm" name="chatId" value="home"><i class="bi bi-arrow-clockwise"></i></button></form><form id="signoutForm" action="/logout" method="post" class="d-flex" role="logout"><button type="submit" class="btn btn-primary btn-sm"><i class="bi bi-box-arrow-left"></i> Logout</button></form></div></div></nav>
-    <main class="ott-shell py-4 fade-in"><section class="hero-banner mb-4"><div class="hero-overlay"></div><div class="hero-content"><div class="eyebrow">Featured Telegram Streaming</div><h1 class="display-title">A premium OTT-style gateway for your 360Hub library.</h1><p class="lead-copy mb-4">Browse channels, collections, and playlists in a cleaner, cinematic interface while keeping every existing Telegram-powered workflow exactly the same.</p><div class="action-cluster"><a href="#browse" class="btn btn-primary"><i class="bi bi-play-fill"></i> Start Watching</a><button type="button" class="admin-only btn btn-secondary" data-bs-toggle="modal" data-bs-target="#createFolderModal" onclick="createPopupForm(event)"><i class="bi bi-folder-plus"></i> New Collection</button></div></div></section><section class="glass-card p-4 mb-4"><div class="ott-toolbar"><div><div class="eyebrow">Dashboard</div></div><button type="button" class="admin-only btn btn-secondary btn-sm" data-bs-toggle="modal" data-bs-target="#createFolderModal" onclick="createPopupForm(event)">Create Folder</button></div><div class="skeleton-row mb-4" aria-hidden="true"><div class="skeleton-tile"></div><div class="skeleton-tile"></div><div class="skeleton-tile"></div><div class="skeleton-tile d-none d-md-block"></div></div><div id="browse" class="section-head"><div><h3>Trending OTT Platforms</h3><p class="section-copy mb-0">Swipe or scroll through your featured 360Hub destinations and jump straight into a channel.</p></div><div class="ott-scroll-controls d-none d-lg-flex"><button type="button" class="btn btn-secondary btn-sm" aria-label="Scroll platforms left" onclick="scrollOttPlatforms(-1)"><i class="bi bi-chevron-left"></i></button><button type="button" class="btn btn-secondary btn-sm" aria-label="Scroll platforms right" onclick="scrollOttPlatforms(1)"><i class="bi bi-chevron-right"></i></button></div></div><div id="platformRail" class="hide-channel row row-cols-2 row-cols-md-3 row-cols-xl-6 g-2 grid-cards scroll-strip pb-3"><!-- Channel card  --><!-- Print --></div><div class="section-head mt-4"><div><h3>Collections & playlists</h3><p class="section-copy mb-0">Folders are shown as binge-ready rows with rich card styling.</p></div></div><div class="row row-cols-2 row-cols-md-3 row-cols-xl-6 g-2 grid-cards"><!-- Folder card  --><!-- Playlist --></div></section></main><footer class="footer-ott"><div class="ott-shell">Made with ❤️ by <a href="https://t.me/Uchiha_Developer" target="_blank">Sasuke Uchiha</a> · © 2025 <a href="https://360hub.fun" target="_blank">360Hub</a>. All Rights Reserved.</div></footer>
+    <main class="ott-shell py-4 fade-in"><section class="hero-banner mb-4"><div class="hero-overlay"></div><div class="hero-content"><div class="eyebrow">Featured Telegram Streaming</div><h1 class="display-title">A premium OTT-style gateway for your 360Hub library.</h1><p class="lead-copy mb-4">Browse channels, collections, and playlists in a cleaner, cinematic interface while keeping every existing Telegram-powered workflow exactly the same.</p><div class="action-cluster"><a href="#browse" class="btn btn-primary"><i class="bi bi-play-fill"></i> Start Watching</a><button type="button" class="admin-only btn btn-secondary" data-bs-toggle="modal" data-bs-target="#createFolderModal" onclick="createPopupForm(event)"><i class="bi bi-folder-plus"></i> New Collection</button></div></div></section><section class="glass-card p-4 mb-4"><div class="ott-toolbar"><div><div class="eyebrow">Dashboard</div></div><button type="button" class="admin-only btn btn-secondary btn-sm" data-bs-toggle="modal" data-bs-target="#createFolderModal" onclick="createPopupForm(event)">Create Folder</button></div><div id="browse" class="section-head"><div><h3>Trending OTT Platforms</h3><p class="section-copy mb-0">Swipe or scroll through your featured 360Hub destinations and jump straight into a channel.</p></div><div class="ott-scroll-controls d-none d-lg-flex"><button type="button" class="btn btn-secondary btn-sm" aria-label="Scroll platforms left" onclick="scrollOttPlatforms(-1)"><i class="bi bi-chevron-left"></i></button><button type="button" class="btn btn-secondary btn-sm" aria-label="Scroll platforms right" onclick="scrollOttPlatforms(1)"><i class="bi bi-chevron-right"></i></button></div></div><div id="platformRail" class="hide-channel row row-cols-2 row-cols-md-3 row-cols-xl-6 g-2 grid-cards scroll-strip pb-3"><!-- Channel card  --><!-- Print --></div><div class="section-head mt-4"><div><h3>Collections & playlists</h3><p class="section-copy mb-0">Folders are shown as binge-ready rows with rich card styling.</p></div></div><div class="row row-cols-2 row-cols-md-3 row-cols-xl-6 g-2 grid-cards"><!-- Folder card  --><!-- Playlist --></div></section></main><footer class="footer-ott"><div class="ott-shell">Made with ❤️ by <a href="https://t.me/Uchiha_Developer" target="_blank">Sasuke Uchiha</a> · © 2025 <a href="https://360hub.fun" target="_blank">360Hub</a>. All Rights Reserved.</div></footer>
 <script>function storeSelectedPlatform(event, link){if(!link)return true;try{localStorage.setItem("selectedPlatformId", link.dataset.channelId || "");localStorage.setItem("selectedPlatformTitle", link.dataset.channelTitle || "");}catch(error){console.warn("Unable to persist platform selection", error);}return true;}function scrollOttPlatforms(direction){const rail=document.getElementById("platformRail");if(!rail)return;const amount=Math.max(rail.clientWidth*0.75,280);rail.scrollBy({left:direction*amount,behavior:"smooth"});}document.addEventListener("DOMContentLoaded",()=>{const selectedId=localStorage.getItem("selectedPlatformId");if(!selectedId)return;const selectedCard=document.querySelector(`[data-channel-id="${selectedId}"] .nm-platform-card`);if(selectedCard){selectedCard.classList.add("is-selected");}});</script></body></html>
\ No newline at end of file
diff --git a/bot/server/template/login.html b/bot/server/template/login.html
index 10340a7..719a03a 100644
--- a/bot/server/template/login.html
+++ b/bot/server/template/login.html
@@ -1,228 +1,120 @@
-<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="icon" href="https://homies-theta.vercel.app/logo.png" type="image/x-icon"><link rel="shortcut icon" href="https://homies-theta.vercel.app/logo.png" type="image/x-icon"><meta name="google-site-verification" content="ah70imZftJ_jasyZPjvWySgKttv2r5Qeuo_e-ixZo4s" /><meta name="description" content="Sign in to 360Hub and continue streaming your Telegram-powered library." /><title>360Hub: Login</title><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" crossorigin="anonymous"><link rel="stylesheet" href="https://bootswatch.com/5/<!-- Theme -->/bootstrap.min.css"><script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js" integrity="sha384-YvpcrYf0tY3lHB60NNkmXc5s9fDVZLESaAA55NDzOxhy9GkcIdslK1eN7N6jIeHz" crossorigin="anonymous"></script><style>
-:root {
-    --bg: #07080d;
-    --bg-soft: #11141d;
-    --panel: rgba(17, 20, 29, 0.92);
-    --panel-strong: rgba(10, 12, 18, 0.96);
-    --line: rgba(255,255,255,0.08);
-    --text: #f5f7fb;
-    --muted: #9ca3b6;
-    --accent: #e50914;
-    --accent-2: #7c3aed;
-    --success: #10b981;
-    --shadow: 0 20px 50px rgba(0,0,0,0.45);
-}
-html { min-height: 100%; scroll-behavior: smooth; }
-body {
-    min-height: 100vh;
-    margin: 0;
-    color: var(--text);
-    background:
-        radial-gradient(circle at top left, rgba(124,58,237,0.22), transparent 28%),
-        radial-gradient(circle at top right, rgba(229,9,20,0.18), transparent 32%),
-        linear-gradient(180deg, #0b0d13 0%, #07080d 45%, #05060a 100%);
-    font-family: 'Inter', system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-}
-a { text-decoration: none; color: inherit; }
-img { max-width: 100%; }
-::-webkit-scrollbar { width: 8px; height: 8px; }
-::-webkit-scrollbar-thumb { background: rgba(255,255,255,0.18); border-radius: 999px; }
-::-webkit-scrollbar-track { background: rgba(255,255,255,0.04); }
-.navbar.ott-navbar {
-    position: sticky; top: 0; z-index: 1030;
-    backdrop-filter: blur(18px);
-    background: rgba(6,7,12,0.82) !important;
-    border-bottom: 1px solid rgba(255,255,255,0.06);
-    box-shadow: 0 12px 30px rgba(0,0,0,0.28);
-}
-.brand-wrap { display:flex; align-items:center; gap: .85rem; }
-.brand-mark {
-    width: 44px; height: 44px; border-radius: 14px;
-    background: linear-gradient(135deg, var(--accent), var(--accent-2));
-    padding: 2px; box-shadow: 0 10px 26px rgba(124,58,237,0.35);
-}
-.brand-mark img { width:100%; height:100%; border-radius: 12px; object-fit: cover; background:#000; }
-.brand-copy small { display:block; color:var(--muted); letter-spacing:.12em; text-transform:uppercase; font-size:.65rem; }
-.brand-copy strong { font-size:1rem; letter-spacing:.03em; }
-.nav-link { color: rgba(255,255,255,.72) !important; }
-.nav-link:hover, .nav-link.active { color: #fff !important; }
-.ott-shell { width:min(1360px, calc(100% - 2rem)); margin: 0 auto; }
-.hero-banner {
-    position: relative; overflow:hidden; border-radius: 28px; min-height: clamp(320px, 52vw, 580px);
-    background: linear-gradient(100deg, rgba(5,6,10,.94) 22%, rgba(5,6,10,.52) 58%, rgba(5,6,10,.25) 100%),
-        url('https://images.unsplash.com/photo-1489599849927-2ee91cede3ba?auto=format&fit=crop&w=1400&q=80') center/cover;
-    box-shadow: var(--shadow); border:1px solid rgba(255,255,255,0.08);
-}
-.hero-overlay { position:absolute; inset:0; background: linear-gradient(180deg, transparent 45%, rgba(7,8,13,.88) 100%); }
-.hero-content { position:relative; z-index:1; padding: clamp(1.4rem, 4vw, 3.5rem); width:min(640px, 100%); }
-.eyebrow { color:#d1d5e5; text-transform:uppercase; letter-spacing:.3em; font-size:.75rem; }
-.display-title { font-size: clamp(2.2rem, 5vw, 4.6rem); font-weight: 800; line-height: 0.95; margin: .7rem 0 1rem; }
-.lead-copy, .section-copy, .meta-text { color: var(--muted); }
-.glass-card, .modal-content, .card, .list-group-item, .alert, .page-link {
-    background: var(--panel) !important;
-    color: var(--text) !important;
-    border: 1px solid var(--line) !important;
-    border-radius: 22px !important;
-    box-shadow: var(--shadow);
-}
-.modal-content { background: var(--panel-strong) !important; }
-.card-header, .modal-header { border-bottom: 1px solid var(--line) !important; background: transparent !important; }
-.footer-ott { color: var(--muted); padding: 2rem 0 3rem; text-align:center; }
-.btn { border-radius: 999px; font-weight: 600; letter-spacing: .01em; }
-.btn-primary {
-    background: linear-gradient(135deg, var(--accent), #ff4d4d) !important;
-    border: none !important; box-shadow: 0 12px 24px rgba(229, 9, 20, .28);
-}
-.btn-secondary {
-    background: rgba(255,255,255,.08) !important; border:1px solid rgba(255,255,255,.12) !important;
-    color:#fff !important;
-}
-.btn-outline-light { border-color: rgba(255,255,255,.2); }
-.form-control, .form-select {
-    background: rgba(255,255,255,.06) !important; border:1px solid rgba(255,255,255,.12) !important;
-    color: var(--text) !important; border-radius: 16px; padding: .85rem 1rem;
-}
-.form-control::placeholder { color: #8d95a8; }
-.form-control:focus, .form-select:focus {
-    box-shadow: 0 0 0 .2rem rgba(124,58,237,.18) !important; border-color: rgba(124,58,237,.55) !important;
-}
-.ott-toolbar { display:flex; gap:1rem; align-items:center; justify-content:space-between; flex-wrap:wrap; margin: 1.25rem 0 1.5rem; }
-.section-head { display:flex; justify-content:space-between; align-items:end; gap:1rem; margin-bottom: 1rem; }
-.section-head h2, .section-head h3 { margin:0; font-weight:800; }
-.scroll-strip { display:flex; gap:1rem; overflow:auto; padding-bottom: .75rem; scroll-snap-type:x proximity; }
-.scroll-strip > * { scroll-snap-align:start; }
-.poster-card, .content-tile {
-    position:relative; overflow:hidden; border-radius: 22px; min-height: 280px;
-    background: linear-gradient(180deg, rgba(255,255,255,.04), rgba(255,255,255,.02));
-    border:1px solid rgba(255,255,255,.08); box-shadow: var(--shadow); transition: transform .35s ease, border-color .35s ease, box-shadow .35s ease;
-}
-.poster-card:hover, .content-tile:hover, .col:hover { transform: translateY(-6px) scale(1.01); border-color: rgba(229,9,20,.5); box-shadow: 0 24px 40px rgba(0,0,0,.42); }
-.tile-thumb {
-    aspect-ratio: 2 / 3; width: 100%; object-fit: cover; background: linear-gradient(135deg, #181b24, #10131b);
-}
-.tile-overlay {
-    position:absolute; inset:0; background: linear-gradient(180deg, rgba(8,10,14,0.05) 0%, rgba(8,10,14,0.3) 48%, rgba(8,10,14,0.96) 100%);
-}
-.tile-content { position:absolute; inset:auto 0 0 0; padding: 1rem; z-index:1; }
-.tile-play {
-    position:absolute; right:1rem; top:1rem; width:44px; height:44px; border-radius:50%; display:grid; place-items:center;
-    background: rgba(255,255,255,.12); backdrop-filter: blur(6px); color:#fff; z-index:1;
-}
-.tile-badge { display:inline-flex; gap:.35rem; align-items:center; font-size:.72rem; color:#fff; border-radius:999px; padding:.35rem .7rem; background: rgba(124,58,237,.28); border:1px solid rgba(255,255,255,.1); }
-.grid-cards > .col, .grid-cards > [class*='col-'] { padding: .55rem; }
-.tile-title {
-    font-weight:700; line-height:1.25; display:-webkit-box; -webkit-line-clamp:2; -webkit-box-orient:vertical; overflow:hidden;
-}
-.meta-row { display:flex; gap:.5rem; flex-wrap:wrap; margin-top:.65rem; }
-.search-panel { padding: 1rem; }
-.pagination .page-link { margin: 0 .25rem; color:#fff; }
-.pagination .page-item.disabled .page-link { opacity: .5; }
-.skeleton-row { display:grid; grid-template-columns: repeat(auto-fit, minmax(170px, 1fr)); gap:1rem; }
-.skeleton-tile { min-height: 260px; border-radius: 22px; position:relative; overflow:hidden; background: rgba(255,255,255,.06); }
-.skeleton-tile::after {
-    content:''; position:absolute; inset:0; transform: translateX(-100%);
-    background: linear-gradient(90deg, transparent, rgba(255,255,255,.13), transparent);
-    animation: shimmer 1.7s infinite;
-}
-@keyframes shimmer { 100% { transform: translateX(100%);} }
-.fade-in { animation: fadeIn .7s ease both; }
-@keyframes fadeIn { from { opacity:0; transform: translateY(18px);} to { opacity:1; transform:none;} }
-.player-layout { display:grid; grid-template-columns: minmax(0, 1.6fr) minmax(320px, .9fr); gap:1.5rem; align-items:start; }
-.video-stage, .info-panel { padding: 1rem; }
-.video-stage .plyr, .video-stage video { border-radius: 24px; overflow:hidden; }
-.action-cluster { display:flex; flex-wrap:wrap; gap:.75rem; }
-.download-actions .btn { min-width: 140px; }
-.notice-panel { border-left: 3px solid var(--accent) !important; }
-.login-shell { width:min(1120px, calc(100% - 2rem)); margin: 0 auto; min-height: calc(100vh - 90px); display:grid; grid-template-columns: 1.1fr .9fr; gap:1.5rem; align-items:center; }
-.login-hero { padding: clamp(1.5rem, 3vw, 3rem); }
-.login-card { padding: 1.5rem; }
-.channel-list .list-group-item { margin-bottom: .85rem; }
-@media (max-width: 991px) {
-    .player-layout, .login-shell { grid-template-columns: 1fr; }
-    .hero-banner { min-height: 420px; }
-}
-@media (max-width: 767px) {
-    .ott-shell { width: min(100% - 1rem, 1360px); }
-    .display-title { font-size: 2.5rem; }
-    .hero-content { padding: 1.25rem; }
-    .download-actions .btn, .action-cluster .btn { width: 100%; }
-}
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <link rel="icon" href="https://homies-theta.vercel.app/logo.png" type="image/x-icon" />
+  <link rel="shortcut icon" href="https://homies-theta.vercel.app/logo.png" type="image/x-icon" />
+  <meta name="description" content="Verify access to 360Hub and continue streaming your Telegram-powered library." />
+  <title>360Hub: Access Verification</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com" />
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet" />
+  <link rel="stylesheet" href="https://bootswatch.com/5/<!-- Theme -->/bootstrap.min.css" />
+  <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" crossorigin="anonymous" />
+  <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js" integrity="sha384-YvpcrYf0tY3lHB60NNkmXc5s9fDVZLESaAA55NDzOxhy9GkcIdslK1eN7N6jIeHz" crossorigin="anonymous"></script>
+  <style>
+    :root { color-scheme: dark; }
+    body { min-height: 100vh; font-family: 'Inter', sans-serif; background: radial-gradient(circle at top, #1f2f7a, #050711 55%); color: #f7f8ff; }
+    .auth-shell { min-height: 100vh; display: grid; place-items: center; padding: 1.5rem; }
+    .auth-card { width: min(700px, 100%); background: rgba(8, 12, 26, 0.88); border: 1px solid rgba(255, 255, 255, 0.1); border-radius: 20px; box-shadow: 0 20px 45px rgba(0,0,0,0.35); }
+    .brand { display:flex; align-items:center; gap:.75rem; margin-bottom:1rem; }
+    .brand img { width: 44px; height:44px; border-radius:12px; }
+    .badge-pill { display:inline-flex; align-items:center; gap:.45rem; border:1px solid rgba(255,255,255,.2); border-radius:999px; padding:.35rem .75rem; font-size:.84rem; }
+    .muted { color: rgba(238, 240, 255, 0.76); }
+    .countdown { min-height: 1.5rem; font-weight: 600; }
+    .admin-login { border-top: 1px solid rgba(255,255,255,.12); margin-top:1.25rem; padding-top:1rem; }
+  </style>
+</head>
+<body>
+  <main class="auth-shell">
+    <section class="auth-card p-4 p-md-5">
+      <div class="brand">
+        <img src="https://homies-theta.vercel.app/logo.png" alt="360Hub" />
+        <div>
+          <div class="small text-uppercase muted">OTT Streaming</div>
+          <h1 class="h4 mb-0">360Hub Access Verification</h1>
+        </div>
+      </div>
 
-.ott-app-new,
-.ott-app-new body { background: #07080d; }
-.ott-app-new .nm-platform-col,
-.ott-app-new .nm-rail-col { min-width: 0; }
-.ott-app-new .nm-platform-link,
-.ott-app-new .nm-media-link { display:block; }
-.ott-app-new .nm-platform-card {
-    display:flex; align-items:center; gap:1rem; min-height: 112px; padding: 1rem 1.1rem;
-    border-radius: 24px; border: 1px solid rgba(255,255,255,.08);
-    background: linear-gradient(145deg, rgba(19,22,33,.98), rgba(10,11,18,.96));
-    box-shadow: 0 16px 40px rgba(0,0,0,.35);
-    transition: transform .35s ease, border-color .35s ease, box-shadow .35s ease;
-}
-.ott-app-new .nm-platform-card:hover { transform: translateY(-6px); border-color: rgba(229,9,20,.45); box-shadow: 0 24px 46px rgba(0,0,0,.5); }
-.ott-app-new .nm-platform-logo-wrap {
-    width: 72px; height: 72px; border-radius: 22px; overflow:hidden; flex: 0 0 72px;
-    background: linear-gradient(135deg, rgba(229,9,20,.22), rgba(124,58,237,.22)); padding: 3px;
-}
-.ott-app-new .nm-platform-logo { width:100%; height:100%; object-fit:cover; border-radius: 19px; background:#0b0b0b; }
-.ott-app-new .nm-platform-kicker, .ott-app-new .nm-media-tag { color: #d1d5db; font-size:.72rem; letter-spacing:.16em; text-transform:uppercase; }
-.ott-app-new .nm-platform-title { margin:.25rem 0; font-size:1rem; font-weight:700; color:#fff; }
-.ott-app-new .nm-platform-pill,
-.ott-app-new .nm-media-badge {
-    display:inline-flex; align-items:center; justify-content:center; min-height: 28px;
-    padding:.3rem .72rem; border-radius:999px; background: rgba(255,255,255,.08); color:#fff;
-    border: 1px solid rgba(255,255,255,.1); font-size:.75rem;
-}
-.ott-app-new .nm-media-badge--info { background: rgba(124,58,237,.24); }
-.ott-app-new .nm-media-card {
-    position:relative; height:100%; overflow:hidden; border-radius: 24px;
-    background: linear-gradient(180deg, rgba(18,20,30,.98), rgba(8,9,14,.98));
-    border:1px solid rgba(255,255,255,.08); box-shadow: 0 22px 45px rgba(0,0,0,.34);
-    transition: transform .35s ease, border-color .35s ease, box-shadow .35s ease;
-}
-.ott-app-new .nm-media-card:hover { transform: translateY(-8px) scale(1.02); border-color: rgba(229,9,20,.42); box-shadow: 0 28px 54px rgba(0,0,0,.52); }
-.ott-app-new .nm-media-poster-wrap { position:relative; aspect-ratio: 2/3; overflow:hidden; background:#111; }
-.ott-app-new .nm-media-poster { width:100%; height:100%; object-fit:cover; display:block; }
-.ott-app-new .nm-media-overlay {
-    position:absolute; inset:0; background: linear-gradient(180deg, rgba(7,8,13,.04) 10%, rgba(7,8,13,.36) 55%, rgba(7,8,13,.95) 100%);
-}
-.ott-app-new .nm-play-chip {
-    position:absolute; inset:auto auto 1rem 1rem; width: 48px; height: 48px; display:grid; place-items:center;
-    border-radius:50%; background: linear-gradient(135deg, #e50914, #7c3aed); color:#fff; font-size:1.2rem;
-    box-shadow: 0 16px 28px rgba(0,0,0,.35); opacity:0; transform: translateY(12px); transition: all .3s ease;
-}
-.ott-app-new .nm-media-card:hover .nm-play-chip { opacity:1; transform: translateY(0); }
-.ott-app-new .nm-media-body { padding: 1rem 1rem 1.1rem; }
-.ott-app-new .nm-media-title {
-    margin: .35rem 0 .7rem; color:#fff; font-weight:700; line-height:1.35;
-    display:-webkit-box; -webkit-box-orient:vertical; -webkit-line-clamp:2; overflow:hidden; min-height: 2.7em;
-}
-.ott-app-new .nm-meta-row { display:flex; flex-wrap:wrap; gap:.45rem; }
-.ott-app-new .nm-edit-btn,
-.ott-app-new .nm-select-box {
-    position:absolute !important; top: .9rem !important; right: .9rem !important; z-index:3;
-}
-.ott-app-new .nm-edit-btn {
-    width: 38px; height: 38px; display:grid; place-items:center; border-radius: 50%;
-    background: rgba(7,8,13,.72); color:#fff; border:1px solid rgba(255,255,255,.12);
-    backdrop-filter: blur(8px);
-}
-.ott-app-new .nm-select-box { width: 1.15rem; height: 1.15rem; }
-.ott-app-new .grid-cards { row-gap: 1rem !important; }
-.ott-app-new .scroll-strip { display:flex !important; flex-wrap:nowrap !important; overflow-x:auto !important; padding-bottom: .85rem; }
-.ott-app-new .scroll-strip > * { flex: 0 0 min(320px, 84vw); }
-.ott-app-new .hero-banner::before {
-    content:''; position:absolute; inset:0; background: linear-gradient(90deg, rgba(5,6,10,.92) 20%, rgba(5,6,10,.5) 55%, rgba(5,6,10,.15) 100%);
-}
-.ott-app-new .glass-card { overflow:hidden; }
-.ott-app-new .search-panel, .ott-app-new .glass-card { backdrop-filter: blur(16px); }
-.ott-app-new .pagination .page-link { background: rgba(255,255,255,.06) !important; }
-.ott-app-new .navbar-toggler { border-color: rgba(255,255,255,.16); }
-@media (max-width: 767px) {
-    .ott-app-new .nm-platform-card { min-height: 96px; padding: .9rem; }
-    .ott-app-new .nm-platform-logo-wrap { width: 60px; height: 60px; flex-basis: 60px; }
-}
+      <p class="muted mb-3">To continue, open the sponsor link and complete the short wait. After verification, you can use the site directly for <strong>24 hours</strong> without username/password login.</p>
+      <div class="d-flex flex-wrap gap-2 mb-4">
+        <span class="badge-pill">✅ No manual login required</span>
+        <span class="badge-pill">⏱️ Access valid for 24 hours</span>
+      </div>
 
-</style></head><body class="ott-app-new"><nav class="navbar navbar-expand-lg ott-navbar" data-bs-theme="dark"><div class="ott-shell container-fluid py-2"><a class="navbar-brand brand-wrap" href="/"><span class="brand-mark"><img src="https://homies-theta.vercel.app/logo.png" alt="Logo"></span><span class="brand-copy"><small>Secure entry</small><strong>360Hub</strong></span></a></div></nav><main class="login-shell fade-in"><section class="hero-banner login-hero"><div class="hero-overlay"></div><div class="hero-content"><div class="eyebrow">Welcome back</div><h1 class="display-title">Your Telegram content, reimagined like a premium streaming service.</h1><p class="lead-copy mb-4">Everything behind the scenes stays intact. This is a visual-only redesign with a more polished OTT-style experience across desktop and mobile.</p><div class="meta-row"><span class="tile-badge">Admin: admin</span><span class="tile-badge">Password: admin</span></div></div></section><section class="glass-card login-card"><div><div class="eyebrow">Sign in</div><h2 class="h3 fw-bold mb-1">Continue watching</h2><p class="section-copy mb-3">Use your existing credentials to access the same backend-powered library.</p></div><div class="alert alert-dismissible alert-danger error-popup" id="errorPopup"><strong>Oh snap! <!-- Error --></strong></div><div id="loginContainer"><form id="signinForm" action="/login" method="post"><input type="hidden" name="redirect_url" value="{{ redirect_url }}"><fieldset><div class="inputBox"><label for="exampleInputUsername" class="form-label mt-2">Username</label><input type="text" class="form-control" id="exampleInputUsername" name="username" placeholder="Enter username"></div><div class="inputBox"><label for="exampleInputPassword1" class="form-label mt-4">Password</label><input type="password" class="form-control" id="exampleInputPassword1" name="password" placeholder="Password" autocomplete="off"></div><div class="text-center mt-4"><button type="submit" class="btn btn-primary inputBox w-100">Submit</button></div></fieldset></form></div></section></main><footer class="footer-ott"><div class="ott-shell">Made with ❤️ by <a href="https://t.me/Uchiha_Developer" target="_blank">Sasuke Uchiha</a><br>&copy; 2025 <a href="https://360hub.fun" target="_blank">360Hub</a>. All Rights Reserved.</div></footer><div class="modal fade" id="infoModal" tabindex="-1" aria-labelledby="infoModalLabel" aria-hidden="true"><div class="modal-dialog modal-dialog-centered"><div class="modal-content text-center"><div class="modal-header border-0"><h5 class="modal-title w-100" id="infoModalLabel"><b>Important Notice!</b></h5></div><div class="modal-body"><p>We Need Support to run the App & Site!</p><p>1. Please click the below ADS Button and wait 10–25 seconds.</p><p>2. After that back to app or site! </p><p>3. The login page will appear automatically.</p><a href="https://www.effectivegatecpm.com/fhc2mgst?key=adbfe79f99ae39dbb10678b4777a7aca" target="_blank" class="btn btn-primary" id="startBtn"><h2>Open Now!</h2></a><div id="countdown" class="mt-3 text-muted"></div></div></div></div></div><script async src="https://www.googletagmanager.com/gtag/js?id=G-0ER9KSVEH8"></script><script>window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}gtag('js', new Date());gtag('config', 'G-0ER9KSVEH8');</script><script>window.onload=function(){var errorPopup=document.getElementById("errorPopup");var errorMessage=errorPopup.querySelector("strong").innerText.trim();if(errorMessage!=="Oh snap! Invalid username or password"){errorPopup.style.display="none";}if(errorMessage==="Oh snap! Invalid username or password"){setTimeout(function(){errorPopup.style.display="none";},5000);}};document.addEventListener("DOMContentLoaded",()=>{const loginContainer=document.getElementById("loginContainer");const modalEl=document.getElementById("infoModal");const countdownEl=document.getElementById("countdown");const startBtn=document.getElementById("startBtn");const modal=new bootstrap.Modal(modalEl,{backdrop:'static',keyboard:false});const lastShown=parseInt(localStorage.getItem("popupLastShown")||"0",10);const now=Date.now();const DAY=24*60*60*1000;if(!lastShown||(now-lastShown)>DAY){modal.show();startBtn.onclick=()=>{const delay=Math.floor(Math.random()*10)+10;let remaining=delay;countdownEl.innerText=`Please wait ${remaining} seconds...`;const timer=setInterval(()=>{remaining--;countdownEl.innerText=`Please wait ${remaining} seconds...`;if(remaining<=0){clearInterval(timer);modal.hide();loginContainer.style.display="block";localStorage.setItem("popupLastShown",Date.now().toString());}},1000);};} else {loginContainer.style.display="block";}});</script></body></html>
+      <form id="verifyForm" action="/verify-access" method="post" class="d-grid gap-3">
+        <input type="hidden" name="redirect_url" value="<!-- RedirectURL -->" />
+        <input type="hidden" name="nonce" value="<!-- VerifyNonce -->" id="verifyNonce" />
+        <a href="https://www.effectivegatecpm.com/fhc2mgst?key=adbfe79f99ae39dbb10678b4777a7aca" target="_blank" rel="noopener noreferrer" class="btn btn-primary btn-lg" id="adBtn">Open Verification Ad</a>
+        <button type="button" class="btn btn-success btn-lg" id="unlockBtn" disabled>Unlock Access</button>
+        <div id="countdown" class="countdown muted"></div>
+      </form>
+
+      <div class="alert alert-danger mt-3 mb-0" id="errorPopup"><strong><!-- Error --></strong></div>
+
+      <details class="admin-login">
+        <summary class="muted">Admin login (optional)</summary>
+        <form action="/login" method="post" class="row g-2 mt-2">
+          <input type="hidden" name="redirect_url" value="<!-- RedirectURL -->" />
+          <div class="col-md-6"><input type="text" class="form-control" name="username" placeholder="Admin username" /></div>
+          <div class="col-md-6"><input type="password" class="form-control" name="password" placeholder="Admin password" autocomplete="off" /></div>
+          <div class="col-12"><button type="submit" class="btn btn-outline-light w-100">Sign in as admin</button></div>
+        </form>
+      </details>
+    </section>
+  </main>
+
+  <script>
+    document.addEventListener('DOMContentLoaded', () => {
+      const adBtn = document.getElementById('adBtn');
+      const unlockBtn = document.getElementById('unlockBtn');
+      const countdown = document.getElementById('countdown');
+      const verifyForm = document.getElementById('verifyForm');
+      const errorPopup = document.getElementById('errorPopup');
+      const verifyNonce = document.getElementById('verifyNonce').value;
+      const verifyWait = parseInt('<!-- VerifyWait -->', 10) || 10;
+      let timer = null;
+
+      if (!errorPopup.textContent.trim()) {
+        errorPopup.style.display = 'none';
+      }
+
+      adBtn.addEventListener('click', async () => {
+        try {
+          const res = await fetch('/verify/start', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({ nonce: verifyNonce }).toString()
+          });
+          if (!res.ok) {
+            countdown.textContent = 'Could not start verification. Please refresh and try again.';
+            return;
+          }
+        } catch (err) {
+          countdown.textContent = 'Verification request failed. Check connection and retry.';
+          return;
+        }
+
+        let remaining = verifyWait;
+        unlockBtn.disabled = true;
+        countdown.textContent = `Verification in progress. Please wait ${remaining}s…`;
+
+        if (timer) clearInterval(timer);
+        timer = setInterval(() => {
+          remaining -= 1;
+          if (remaining <= 0) {
+            clearInterval(timer);
+            unlockBtn.disabled = false;
+            countdown.textContent = 'Verification ready. Click “Unlock Access”.';
+            return;
+          }
+          countdown.textContent = `Verification in progress. Please wait ${remaining}s…`;
+        }, 1000);
+      });
+
+      unlockBtn.addEventListener('click', () => verifyForm.submit());
+    });
+  </script>
+</body>
+</html>
diff --git a/update.py b/update.py
index cd55179..0f4db67 100644
--- a/update.py
+++ b/update.py
@@ -16,7 +16,7 @@
 load_dotenv('config.env', override=True)
 
 UPSTREAM_REPO = getenv('UPSTREAM_REPO', "https://github.com/SasukeXDev/tgstr")
-UPSTREAM_BRANCH = getenv('UPSTREAM_BRANCH', "codex/fix-channel-loading-issues-and-remove-sources-d0mhce")
+UPSTREAM_BRANCH = getenv('UPSTREAM_BRANCH', "codex/remove-green-circle-section-and-add-24hr-verification-bcw9ql")
 
 if UPSTREAM_REPO is not None:
     if opath.exists('.git'):