add hire/resume pages, contact form, security middleware, and admin improvements

templates/admin/dashboard.html

@@ -7,6 +7,7 @@
     <div class="admin-actions">
       <a href="/admin/new" class="btn">New Post</a>
       <a href="/admin/status" class="btn btn-outline">Edit Status</a>
+      <a href="/admin/uploads" class="btn btn-outline">Uploads</a>
       <a href="/" class="btn btn-outline">View Site</a>
       <form method="POST" action="/admin/logout" class="inline-form">
         <button type="submit" class="btn btn-outline">Logout</button>

templates/admin/editor.html

@@ -45,60 +45,5 @@
   </form>
 </div>
 
-<script>
-(function() {
-  var previewBtn  = document.getElementById('preview-btn');
-  var uploadBtn   = document.getElementById('upload-btn');
-  var imgFile     = document.getElementById('img-file');
-  var textarea    = document.getElementById('content');
-  var output      = document.getElementById('preview-output');
-  var uploadStatus = document.getElementById('upload-status');
-
-  // --- Preview ---
-  function refreshPreview() {
-    var fd = new FormData();
-    fd.append('content', textarea.value);
-    fetch('/admin/preview', { method: 'POST', body: fd })
-      .then(function(r) { return r.text(); })
-      .then(function(html) { output.innerHTML = html; })
-      .catch(function() { output.innerHTML = '<p class="form-error">Preview failed.</p>'; });
-  }
-
-  previewBtn.addEventListener('click', refreshPreview);
-  if (textarea.value.trim()) { refreshPreview(); }
-
-  // --- Image upload ---
-  uploadBtn.addEventListener('click', function() { imgFile.click(); });
-
-  imgFile.addEventListener('change', function() {
-    if (!this.files.length) return;
-    var file = this.files[0];
-    var fd = new FormData();
-    fd.append('image', file);
-
-    uploadStatus.textContent = 'Uploading…';
-    uploadBtn.disabled = true;
-
-    fetch('/admin/upload', { method: 'POST', body: fd })
-      .then(function(r) { return r.json(); })
-      .then(function(data) {
-        if (data.error) {
-          uploadStatus.textContent = 'Error: ' + data.error;
-          return;
-        }
-        // Insert markdown at cursor position
-        var pos = textarea.selectionStart;
-        var before = textarea.value.substring(0, pos);
-        var after  = textarea.value.substring(textarea.selectionEnd);
-        textarea.value = before + data.markdown + after;
-        textarea.selectionStart = textarea.selectionEnd = pos + data.markdown.length;
-        textarea.focus();
-        uploadStatus.textContent = 'Inserted: ' + data.url;
-        setTimeout(function() { uploadStatus.textContent = ''; }, 3000);
-      })
-      .catch(function() { uploadStatus.textContent = 'Upload failed.'; })
-      .finally(function() { uploadBtn.disabled = false; imgFile.value = ''; });
-  });
-})();
-</script>
+<script src="/static/js/editor.js"></script>
 {{end}}

templates/admin/uploads.html

@@ -0,0 +1,30 @@
+{{define "title"}}Uploads — Admin{{end}}
+
+{{define "content"}}
+<div class="admin-wrap">
+  <div class="admin-header">
+    <h1>Uploads</h1>
+    <div class="admin-actions">
+      <a href="/admin" class="btn btn-outline">Back to Dashboard</a>
+    </div>
+  </div>
+
+  {{if .Flash}}<p class="flash">{{.Flash}}</p>{{end}}
+
+  {{if not .Files}}
+  <p class="muted">No uploaded images yet.</p>
+  {{else}}
+  <div class="upload-browser">
+    {{range .Files}}
+    <div class="upload-item">
+      <img src="{{.URL}}" alt="{{.Name}}" class="upload-thumb">
+      <div class="upload-info">
+        <code class="upload-name">{{.Name}}</code>
+        <code class="upload-md">{{.Markdown}}</code>
+      </div>
+    </div>
+    {{end}}
+  </div>
+  {{end}}
+</div>
+{{end}}