From c0f4c2e7e2dcdaa8837c6293c661751e9031bdc9 Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Mon, 23 Mar 2026 18:11:42 +0800
Subject: [PATCH 01/12] =?UTF-8?q?feat:=20=E6=B7=BB=E5=8A=A0=E5=A4=96?=
 =?UTF-8?q?=E7=BD=91=E9=83=A8=E7=BD=B2=E8=AF=A6=E7=BB=86=E6=AD=A5=E9=AA=A4?=
 =?UTF-8?q?=E5=92=8C=E6=9D=83=E9=99=90=E6=8E=A7=E5=88=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md                                     | 103 +++++++++++++
 src/main/resources/templates/admin/stats.html | 144 +++++++++++++++++-
 2 files changed, 244 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index 7d189be..71bfd71 100644
--- a/README.md
+++ b/README.md
@@ -231,6 +231,109 @@ src/
 - SSL：申请证书后将 `listen 443 ssl` 与 `ssl_certificate`/`ssl_certificate_key` 加入上面配置。
 - 数据库迁移：生产环境建议使用 Flyway/Liquibase 管理 SQL 迁移，避免 `ddl-auto` 修改结构。
 
+## 外网部署详细步骤（内网穿透方案）
+
+### 1. 注册 natapp 账号
+1. 访问：https://natapp.cn/
+2. 点击右上角 "注册"
+3. 填写邮箱、密码完成注册
+4. 登录账号
+
+### 2. 创建隧道
+1. 登录后进入 "购买隧道" 页面
+2. 选择 "免费隧道"（或者付费隧道，更稳定）
+3. 配置隧道信息：
+   - 隧道名称：随意填写（如：myblog）
+   - 隧道协议：选择 `http`
+   - 本地端口：填写 `8080`（项目端口）
+   - 域名：可以选择随机域名或自定义域名（需要付费）
+4. 点击 "购买"（免费隧道直接获取）
+
+### 3. 下载 natapp 客户端
+1. 进入 "我的隧道" 页面
+2. 找到刚创建的隧道
+3. 点击 "客户端下载"
+4. 根据系统选择下载：
+   - Windows：`natapp_windows_amd64.zip`
+   - Mac：`natapp_darwin_amd64.zip`
+   - Linux：`natapp_linux_amd64.zip`
+
+### 4. 获取 authtoken
+1. 在 "我的隧道" 页面
+2. 找到你的隧道
+3. 复制 **authtoken**（一串随机字符）
+
+### 5. 启动项目
+在终端中启动 Spring Boot 项目：
+```bash
+cd blog-system-template
+mvn spring-boot:run
+```
+确保项目在 `http://localhost:8080` 正常运行。
+
+### 6. 运行 natapp 客户端
+**Windows 系统：**
+1. 解压下载的 `natapp_windows_amd64.zip`
+2. 打开命令提示符（CMD）或 PowerShell
+3. 进入 natapp 解压目录
+4. 运行命令：
+   ```bash
+   natapp.exe -authtoken=你的authtoken
+   ```
+
+**Mac/Linux 系统：**
+1. 解压下载的压缩包
+2. 打开终端
+3. 进入 natapp 解压目录
+4. 运行命令：
+   ```bash
+   chmod +x natapp
+   ./natapp -authtoken=你的authtoken
+   ```
+
+### 7. 获取外网访问地址
+natapp 启动成功后，会显示类似信息：
+```
+Tunnel Status       online
+Version             2.3.9
+Forwarding          http://abc123.natappfree.cc -> http://127.0.0.1:8080
+Web Interface       http://127.0.0.1:4040
+Total Connections   0
+Avg Conn Time       0.00ms
+```
+其中 `http://abc123.natappfree.cc` 就是你的外网访问地址！
+
+### 8. 测试访问
+在浏览器中访问你的外网地址：
+- 首页：`http://abc123.natappfree.cc/`
+- 登录：`http://abc123.natappfree.cc/auth/login`
+- 后台：`http://abc123.natappfree.cc/admin`
+
+### 9. 保持隧道运行
+**Windows 后台运行：**
+```bash
+start /b natapp.exe -authtoken=你的authtoken
+```
+
+**Mac/Linux 后台运行：**
+```bash
+nohup ./natapp -authtoken=你的authtoken &
+```
+
+### 10. 其他内网穿透服务
+| 服务 | 免费方案 | 优点 | 缺点 |
+|------|---------|------|------|
+| **natapp.cn** | 有免费隧道 | 国内访问快、操作简单 | 免费域名随机 |
+| **ngrok.cc** | 有免费隧道 | 稳定性好 | 免费隧道有限 |
+| **cloudflare tunnel** | 完全免费 | 无限流量、稳定 | 配置稍复杂 |
+| **花生壳** | 有免费版 | 老牌服务 | 免费版限制多 |
+
+### 11. 注意事项
+- 免费隧道的域名是随机的，每次重启会变化
+- 建议使用付费隧道获取固定域名
+- 内网穿透服务可能有访问速度限制，不建议用于生产环境
+- 确保本地网络稳定，避免断开连接
+
 ## 接口速查（选摘）
 - 认证与账户
   - `POST /auth/login` 登录
diff --git a/src/main/resources/templates/admin/stats.html b/src/main/resources/templates/admin/stats.html
index c94a733..b5923b0 100644
--- a/src/main/resources/templates/admin/stats.html
+++ b/src/main/resources/templates/admin/stats.html
@@ -95,9 +95,67 @@ <h2 class="mb-0 fw-bold"><i class="bi bi-bar-chart text-info me-2"></i>系统统
     </div>
   </div>
 
-  <div class="alert alert-light border d-flex align-items-center mb-4">
-    <i class="bi bi-info-circle me-2 text-primary"></i>
-    <span>统计图表已暂时关闭，仅保留数据概览与系统信息。</span>
+  <div class="row g-4 mb-4">
+    <div class="col-lg-6">
+      <div class="card">
+        <div class="card-header py-3 fw-bold"><i class="bi bi-graph-up-arrow me-2"></i>新增趋势</div>
+        <div class="card-body">
+          <div th:if="${#lists.isEmpty(last7DaysLabels)}" class="text-muted">暂无数据</div>
+          <canvas id="chartTrend" height="120" th:if="${!#lists.isEmpty(last7DaysLabels)}"></canvas>
+        </div>
+      </div>
+    </div>
+    <div class="col-lg-6">
+      <div class="card">
+        <div class="card-header py-3 fw-bold"><i class="bi bi-hand-thumbs-up me-2"></i>Top5 点赞文章</div>
+        <div class="card-body">
+          <div th:if="${#lists.isEmpty(topLikesTitles)}" class="text-muted">暂无点赞数据</div>
+          <canvas id="chartTopLikes" height="120" th:if="${!#lists.isEmpty(topLikesTitles)}"></canvas>
+        </div>
+      </div>
+    </div>
+  </div>
+
+  <div class="row g-4 mb-4">
+    <div class="col-lg-6">
+      <div class="card">
+        <div class="card-header py-3 fw-bold"><i class="bi bi-chat-dots me-2"></i>Top5 评论最多文章</div>
+        <div class="card-body">
+          <div th:if="${#lists.isEmpty(topCommentedTitles)}" class="text-muted">暂无评论数据</div>
+          <canvas id="chartTopCommented" height="120" th:if="${!#lists.isEmpty(topCommentedTitles)}"></canvas>
+        </div>
+      </div>
+    </div>
+    <div class="col-lg-6">
+      <div class="card">
+        <div class="card-header py-3 fw-bold"><i class="bi bi-bar-chart-line me-2"></i>最近 10 篇文章浏览量</div>
+        <div class="card-body">
+          <div th:if="${#lists.isEmpty(recentTitles)}" class="text-muted">暂无浏览数据</div>
+          <canvas id="chartRecentViews" height="120" th:if="${!#lists.isEmpty(recentTitles)}"></canvas>
+        </div>
+      </div>
+    </div>
+  </div>
+
+  <div class="row g-4 mb-4">
+    <div class="col-lg-6">
+      <div class="card">
+        <div class="card-header py-3 fw-bold"><i class="bi bi-hash me-2"></i>标签 Top10 使用分布</div>
+        <div class="card-body">
+          <div th:if="${#lists.isEmpty(tagTopNames)}" class="text-muted">暂无标签数据</div>
+          <canvas id="chartTags" height="90" th:if="${!#lists.isEmpty(tagTopNames)}"></canvas>
+        </div>
+      </div>
+    </div>
+    <div class="col-lg-6">
+      <div class="card">
+        <div class="card-header py-3 fw-bold"><i class="bi bi-pie-chart me-2"></i>分类文章占比</div>
+        <div class="card-body">
+          <div th:if="${#lists.isEmpty(categoryNames)}" class="text-muted">暂无分类数据</div>
+          <canvas id="chartCategoryPie" height="90" th:if="${!#lists.isEmpty(categoryNames)}"></canvas>
+        </div>
+      </div>
+    </div>
   </div>
 
   <div class="card shadow-sm border-0">
@@ -128,6 +186,86 @@ <h2 class="mb-0 fw-bold"><i class="bi bi-bar-chart text-info me-2"></i>系统统
     <a class="btn btn-outline-secondary rounded-pill px-4" th:href="@{/admin}"><i class="bi bi-arrow-left me-1"></i>返回仪表盘</a>
   </div>
 </div>
+<script src="https://cdn.jsdelivr.net/npm/chart.js@4.4.1/dist/chart.umd.min.js"></script>
+<script th:inline="javascript">
+  const trendLabels     = /*[[${last7DaysLabels}]]*/ [];
+  const trendArticles   = /*[[${last7Articles}]]*/ [];
+  const trendComments   = /*[[${last7Comments}]]*/ [];
+  const tagTopNames     = /*[[${tagTopNames}]]*/ [];
+  const tagTopCounts    = /*[[${tagTopCounts}]]*/ [];
+  const topLikesTitles  = /*[[${topLikesTitles}]]*/ [];
+  const topLikesValues  = /*[[${topLikesValues}]]*/ [];
+  const topCommentedTitles = /*[[${topCommentedTitles}]]*/ [];
+  const topCommentedCounts = /*[[${topCommentedCounts}]]*/ [];
+  const recentTitles    = /*[[${recentTitles}]]*/ [];
+  const recentViews     = /*[[${recentViews}]]*/ [];
+  const categoryNames   = /*[[${categoryNames}]]*/ [];
+  const categoryCounts  = /*[[${categoryCounts}]]*/ [];
+
+  const theme = { primary:'#2563eb', success:'#22c55e', warning:'#f59e0b', info:'#0ea5e9', danger:'#ef4444' };
+
+  const elTrend = document.getElementById('chartTrend');
+  if (elTrend) {
+    new Chart(elTrend.getContext('2d'), {
+      type: 'line',
+      data: {
+        labels: trendLabels,
+        datasets: [
+          { label: '新增文章', data: trendArticles, tension: .4, borderColor: theme.primary, backgroundColor: 'rgba(37,99,235,0.15)', fill: true },
+          { label: '新增评论', data: trendComments, tension: .4, borderColor: theme.success, backgroundColor: 'rgba(34,197,94,0.15)', fill: true }
+        ]
+      },
+      options: {
+        plugins: { legend: { position: 'bottom' } },
+        scales: { y: { beginAtZero: true, ticks: { precision: 0 } }, x: { grid: { display: false } } }
+      }
+    });
+  }
+
+  const elTags = document.getElementById('chartTags');
+  if (elTags) {
+    new Chart(elTags.getContext('2d'), {
+      type: 'doughnut',
+      data: { labels: tagTopNames, datasets: [{ data: tagTopCounts, borderWidth: 0, backgroundColor: ['#2563eb','#22c55e','#f59e0b','#ef4444','#0ea5e9','#8b5cf6','#14b8a6','#f43f5e','#64748b','#10b981'] }] },
+      options: { plugins: { legend: { position: 'bottom' } }, cutout: '55%' }
+    });
+  }
+
+  const elTopLikes = document.getElementById('chartTopLikes');
+  if (elTopLikes) {
+    new Chart(elTopLikes.getContext('2d'), {
+      type: 'bar',
+      data: { labels: topLikesTitles, datasets: [{ data: topLikesValues, backgroundColor: theme.success }] },
+      options: { indexAxis: 'y', plugins: { legend: { display: false } }, scales: { x: { beginAtZero: true, ticks: { precision: 0 } } } }
+    });
+  }
+
+  const elTopCommented = document.getElementById('chartTopCommented');
+  if (elTopCommented) {
+    new Chart(elTopCommented.getContext('2d'), {
+      type: 'bar',
+      data: { labels: topCommentedTitles, datasets: [{ data: topCommentedCounts, backgroundColor: theme.warning }] },
+      options: { indexAxis: 'y', plugins: { legend: { display: false } }, scales: { x: { beginAtZero: true, ticks: { precision: 0 } } } }
+    });
+  }
+
+  const elRecent = document.getElementById('chartRecentViews');
+  if (elRecent) {
+    new Chart(elRecent.getContext('2d'), {
+      type: 'bar',
+      data: { labels: recentTitles, datasets: [{ data: recentViews, backgroundColor: theme.info }] },
+      options: { plugins: { legend: { display: false } }, scales: { y: { beginAtZero: true, ticks: { precision: 0 } } } }
+    });
+  }
+  const elCategoryPie = document.getElementById('chartCategoryPie');
+  if (elCategoryPie) {
+    new Chart(elCategoryPie.getContext('2d'), {
+      type: 'doughnut',
+      data: { labels: categoryNames, datasets: [{ data: categoryCounts, borderWidth: 0, backgroundColor: ['#3b82f6','#10b981','#f59e0b','#ef4444','#06b6d4','#8b5cf6','#14b8a6','#f43f5e','#64748b','#84cc16'] }] },
+      options: { plugins: { legend: { position: 'bottom' } }, cutout: '55%' }
+    });
+  }
+</script>
 <script>
   // Welcome date
   (function(){

From c3de2e70b88995be2ba985a83ea93aea0ae5f2e1 Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Thu, 9 Apr 2026 22:42:07 +0800
Subject: [PATCH 02/12] chore: stop tracking IDE files and runtime uploads

---
 .gitignore       | 43 +++++++++++++++++++++++++++++++++++++++++++
 uploads/.gitkeep |  1 +
 2 files changed, 44 insertions(+)
 create mode 100644 uploads/.gitkeep

diff --git a/.gitignore b/.gitignore
index f5c105a..fd72fca 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,10 +2,53 @@
 /target/
 *.log
 
+# Compiled artifacts
+*.class
+*.jar
+
 # IntelliJ
 /.idea/
 *.iml
 
+# Visual Studio / Visual Studio Code
+/.vs/
+/.vscode/
+
 # OS
 Thumbs.db
 .DS_Store
+
+# Eclipse
+/.settings/
+.classpath
+.project
+.factorypath
+
+# Local database dumps / backups
+blog_db_backup.sql
+*.sql
+
+# Local runtime data
+uploads/*
+!uploads/.gitkeep
+ 
+# Local config / secrets
+.env
+.env.*
+application-local.yml
+application-local.yaml
+application-local.properties
+src/main/resources/application-local.yml
+src/main/resources/application-dev-local.yml
+src/main/resources/application-prod-local.yml
+
+# Root-level stray compiled or source artifacts
+/com/
+
+# Logs
+logs/
+
+# Local Spring Boot config (do not commit secrets)
+application-local.yml
+application-local.yaml
+application-local.properties
diff --git a/uploads/.gitkeep b/uploads/.gitkeep
new file mode 100644
index 0000000..8d1c8b6
--- /dev/null
+++ b/uploads/.gitkeep
@@ -0,0 +1 @@
+ 

From f2f046e17c33be248f50fe421632d9750d1bb64c Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Thu, 9 Apr 2026 22:43:11 +0800
Subject: [PATCH 03/12] refactor: externalize upload directory configuration

---
 .env.example                                  | 12 +++++++
 .../blog/controller/ArticleController.java    |  7 ++--
 src/main/resources/application-example.yml    | 34 +++++++++++++++++++
 3 files changed, 51 insertions(+), 2 deletions(-)
 create mode 100644 .env.example
 create mode 100644 src/main/resources/application-example.yml

diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..491cbae
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,12 @@
+SPRING_DATASOURCE_URL=jdbc:mysql://localhost:3306/blog_db?useUnicode=true&characterEncoding=utf8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=Asia/Shanghai
+SPRING_DATASOURCE_USERNAME=your_username
+SPRING_DATASOURCE_PASSWORD=your_password
+
+MAIL_HOST=smtp.qq.com
+MAIL_PORT=465
+MAIL_USERNAME=your@qq.com
+MAIL_PASSWORD=your-app-code
+MAIL_PROTOCOL=smtps
+
+# Upload directory override (optional). Default is ${user.dir}/uploads
+APP_UPLOAD_DIR=C:/data/blog/uploads
diff --git a/src/main/java/com/example/blog/controller/ArticleController.java b/src/main/java/com/example/blog/controller/ArticleController.java
index 6b55ded..7db61a5 100644
--- a/src/main/java/com/example/blog/controller/ArticleController.java
+++ b/src/main/java/com/example/blog/controller/ArticleController.java
@@ -8,6 +8,7 @@
 import com.example.blog.service.TaxonomyService;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.Model;
 import org.springframework.validation.BindingResult;
@@ -33,6 +34,8 @@ public class ArticleController {
   private final CommentService commentService;
   private final TaxonomyService taxonomyService;
   private final com.example.blog.service.UserService userService;
+  @Value("${app.upload-dir:${user.dir}/uploads}")
+  private String uploadDir;
 
   @GetMapping
   public String list(@RequestParam(defaultValue = "0") int page, 
@@ -227,7 +230,7 @@ public ResponseEntity<?> uploadImage(@RequestParam("file") MultipartFile file) t
       ext = original.substring(original.lastIndexOf(".")).toLowerCase();
     }
     String name = UUID.randomUUID().toString().replace("-", "") + ext;
-    Path dir = Paths.get(System.getProperty("user.dir"), "uploads");
+    Path dir = Paths.get(uploadDir);
     if (!Files.exists(dir)) {
       Files.createDirectories(dir);
     }
@@ -239,7 +242,7 @@ public ResponseEntity<?> uploadImage(@RequestParam("file") MultipartFile file) t
 
   @GetMapping("/image/{filename}")
   public ResponseEntity<Resource> getImage(@PathVariable String filename) throws java.io.IOException {
-    Path file = Paths.get(System.getProperty("user.dir"), "uploads", filename);
+    Path file = Paths.get(uploadDir, filename);
     if (!Files.exists(file)) {
       return ResponseEntity.notFound().build();
     }
diff --git a/src/main/resources/application-example.yml b/src/main/resources/application-example.yml
new file mode 100644
index 0000000..020e54d
--- /dev/null
+++ b/src/main/resources/application-example.yml
@@ -0,0 +1,34 @@
+server:
+  port: 8080
+
+spring:
+  datasource:
+    url: jdbc:mysql://localhost:3306/blog_db?useUnicode=true&characterEncoding=utf8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=Asia/Shanghai
+    username: your_username
+    password: your_password
+  jpa:
+    hibernate:
+      ddl-auto: update
+    open-in-view: false
+    show-sql: true
+    properties:
+      hibernate:
+        format_sql: true
+  thymeleaf:
+    cache: false
+  mail:
+    host: smtp.example.com
+    port: 465
+    username: your_email@example.com
+    password: your_mail_app_password
+    protocol: smtps
+    properties:
+      mail:
+        smtp:
+          auth: true
+          ssl:
+            enable: true
+        debug: false
+
+app:
+  upload-dir: ${user.dir}/uploads

From 9ff6b7bf6fa9e51a49467001cf18bc9c4813ab0b Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Thu, 9 Apr 2026 22:43:49 +0800
Subject: [PATCH 04/12] docs: update README for repo cleanup and external
 config

---
 README.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/README.md b/README.md
index 71bfd71..ba3e3fc 100644
--- a/README.md
+++ b/README.md
@@ -258,6 +258,17 @@ src/
    - Mac：`natapp_darwin_amd64.zip`
    - Linux：`natapp_linux_amd64.zip`
 
+## 仓库规范与目录
+- 标准结构：仅保留 src/、pom.xml、README.md、.gitignore 等必要文件
+- IDE/本地文件不纳入版本库：.settings/、.vscode/、.classpath、.project、.factorypath
+- 上传目录不纳入版本库：uploads/*（仅保留占位 uploads/.gitkeep）
+- 根目录若出现 com/** 这类历史遗留副本，不再跟踪，源码以 src/main/java/** 为准
+
+## 外部化配置说明
+- 示例配置：src/main/resources/application-example.yml、.env.example
+- 支持通过环境变量或 profile 覆盖默认值（参考 Spring Boot Externalized Configuration）
+- 上传目录可配置：app.upload-dir 或 APP_UPLOAD_DIR，默认 ${user.dir}/uploads
+
 ### 4. 获取 authtoken
 1. 在 "我的隧道" 页面
 2. 找到你的隧道

From 7d434cca74058418e93765d6e156a5323d3f0111 Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Thu, 9 Apr 2026 23:36:18 +0800
Subject: [PATCH 05/12] refactor: split configuration into dev and prod
 profiles

---
 src/main/resources/application-dev.yml     | 34 +++++++++++++++++
 src/main/resources/application-example.yml | 15 +++++++-
 src/main/resources/application-prod.yml    | 33 +++++++++++++++++
 src/main/resources/application.yml         | 43 +++++++++-------------
 4 files changed, 99 insertions(+), 26 deletions(-)
 create mode 100644 src/main/resources/application-dev.yml
 create mode 100644 src/main/resources/application-prod.yml

diff --git a/src/main/resources/application-dev.yml b/src/main/resources/application-dev.yml
new file mode 100644
index 0000000..78b04dd
--- /dev/null
+++ b/src/main/resources/application-dev.yml
@@ -0,0 +1,34 @@
+server:
+  error:
+    include-message: always
+    include-stacktrace: always
+
+spring:
+  datasource:
+    url: jdbc:mysql://localhost:3306/blog_db?useUnicode=true&characterEncoding=utf8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=Asia/Shanghai
+    username: root
+    password: xjliieea691
+    driver-class-name: com.mysql.cj.jdbc.Driver
+  jpa:
+    hibernate:
+      ddl-auto: update
+    show-sql: true
+  thymeleaf:
+    cache: false
+  mail:
+    host: ${MAIL_HOST:smtp.qq.com}
+    port: ${MAIL_PORT:465}
+    username: ${MAIL_USERNAME:}
+    password: ${MAIL_PASSWORD:}
+    protocol: ${MAIL_PROTOCOL:smtps}
+    properties:
+      mail:
+        smtp:
+          auth: true
+          ssl:
+            enable: true
+        debug: false
+
+logging:
+  level:
+    org.thymeleaf: DEBUG
diff --git a/src/main/resources/application-example.yml b/src/main/resources/application-example.yml
index 020e54d..2721eec 100644
--- a/src/main/resources/application-example.yml
+++ b/src/main/resources/application-example.yml
@@ -31,4 +31,17 @@ spring:
         debug: false
 
 app:
-  upload-dir: ${user.dir}/uploads
+  upload:
+    dir: ${user.dir}/uploads
+    max-size: 5242880
+    allowed-extensions:
+      - .jpg
+      - .jpeg
+      - .png
+      - .gif
+      - .webp
+    allowed-content-types:
+      - image/jpeg
+      - image/png
+      - image/gif
+      - image/webp
diff --git a/src/main/resources/application-prod.yml b/src/main/resources/application-prod.yml
new file mode 100644
index 0000000..d714fef
--- /dev/null
+++ b/src/main/resources/application-prod.yml
@@ -0,0 +1,33 @@
+server:
+  error:
+    include-message: never
+    include-stacktrace: never
+
+spring:
+  datasource:
+    url: ${SPRING_DATASOURCE_URL}
+    username: ${SPRING_DATASOURCE_USERNAME}
+    password: ${SPRING_DATASOURCE_PASSWORD}
+  jpa:
+    hibernate:
+      ddl-auto: validate
+    show-sql: false
+  thymeleaf:
+    cache: true
+  mail:
+    host: ${MAIL_HOST}
+    port: ${MAIL_PORT:465}
+    username: ${MAIL_USERNAME}
+    password: ${MAIL_PASSWORD}
+    protocol: ${MAIL_PROTOCOL:smtps}
+    properties:
+      mail:
+        smtp:
+          auth: true
+          ssl:
+            enable: true
+        debug: false
+
+logging:
+  level:
+    org.thymeleaf: INFO
diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
index d6422ee..e55cc1e 100644
--- a/src/main/resources/application.yml
+++ b/src/main/resources/application.yml
@@ -1,45 +1,38 @@
 server:
   port: 8080
-  error:
-    include-message: always
-    include-binding-errors: always
-    include-stacktrace: always
 
 spring:
-  datasource:
-    url: jdbc:mysql://localhost:3306/blog_db?useUnicode=true&characterEncoding=utf8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=Asia/Shanghai
-    username: root
-    password: xjliieea691
+  profiles:
+    active: dev
   servlet:
     multipart:
       max-file-size: 5MB
       max-request-size: 10MB
   jpa:
-    hibernate:
-      ddl-auto: update
     open-in-view: false
-    show-sql: true
     properties:
       hibernate:
         format_sql: true
   thymeleaf:
     cache: false
-  mail:
-    host: ${MAIL_HOST:smtp.qq.com}
-    port: ${MAIL_PORT:465}
-    username: ${MAIL_USERNAME:2054469475@qq.com}
-    password: ${MAIL_PASSWORD:yxxkfqdhqmqvcfdd}
-    protocol: ${MAIL_PROTOCOL:smtps}
-    properties:
-      mail:
-        smtp:
-          auth: true
-          ssl:
-            enable: true
-        debug: false
+
+app:
+  upload:
+    dir: ${APP_UPLOAD_DIR:${user.dir}/uploads}
+    max-size: 5242880
+    allowed-extensions:
+      - .jpg
+      - .jpeg
+      - .png
+      - .gif
+      - .webp
+    allowed-content-types:
+      - image/jpeg
+      - image/png
+      - image/gif
+      - image/webp
 
 logging:
   level:
-    org.thymeleaf: DEBUG
     org.springframework.web: INFO
     org.springframework.security: INFO

From 45ab123602edecf15217850f5d015131a1a5b67a Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Thu, 9 Apr 2026 23:36:40 +0800
Subject: [PATCH 06/12] refactor: extract upload logic into service with
 validation

---
 .../com/example/blog/BlogApplication.java     |  3 +
 .../example/blog/config/UploadProperties.java | 45 +++++++++++++
 .../blog/controller/ArticleController.java    | 36 +++-------
 .../example/blog/service/UploadService.java   |  9 +++
 .../blog/service/impl/LocalUploadService.java | 66 +++++++++++++++++++
 5 files changed, 132 insertions(+), 27 deletions(-)
 create mode 100644 src/main/java/com/example/blog/config/UploadProperties.java
 create mode 100644 src/main/java/com/example/blog/service/UploadService.java
 create mode 100644 src/main/java/com/example/blog/service/impl/LocalUploadService.java

diff --git a/src/main/java/com/example/blog/BlogApplication.java b/src/main/java/com/example/blog/BlogApplication.java
index 522972c..65f19f2 100644
--- a/src/main/java/com/example/blog/BlogApplication.java
+++ b/src/main/java/com/example/blog/BlogApplication.java
@@ -2,8 +2,11 @@
 
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.boot.context.properties.EnableConfigurationProperties;
+import com.example.blog.config.UploadProperties;
 
 @SpringBootApplication
+@EnableConfigurationProperties(UploadProperties.class)
 public class BlogApplication {
   public static void main(String[] args) {
     SpringApplication.run(BlogApplication.class, args);
diff --git a/src/main/java/com/example/blog/config/UploadProperties.java b/src/main/java/com/example/blog/config/UploadProperties.java
new file mode 100644
index 0000000..303ed1f
--- /dev/null
+++ b/src/main/java/com/example/blog/config/UploadProperties.java
@@ -0,0 +1,45 @@
+package com.example.blog.config;
+
+import org.springframework.boot.context.properties.ConfigurationProperties;
+
+import java.util.List;
+
+@ConfigurationProperties(prefix = "app.upload")
+public class UploadProperties {
+  private String dir = System.getProperty("user.dir") + "/uploads";
+  private long maxSize = 5 * 1024 * 1024;
+  private List<String> allowedExtensions = List.of(".jpg", ".jpeg", ".png", ".gif", ".webp");
+  private List<String> allowedContentTypes = List.of("image/jpeg", "image/png", "image/gif", "image/webp");
+
+  public String getDir() {
+    return dir;
+  }
+
+  public void setDir(String dir) {
+    this.dir = dir;
+  }
+
+  public long getMaxSize() {
+    return maxSize;
+  }
+
+  public void setMaxSize(long maxSize) {
+    this.maxSize = maxSize;
+  }
+
+  public List<String> getAllowedExtensions() {
+    return allowedExtensions;
+  }
+
+  public void setAllowedExtensions(List<String> allowedExtensions) {
+    this.allowedExtensions = allowedExtensions;
+  }
+
+  public List<String> getAllowedContentTypes() {
+    return allowedContentTypes;
+  }
+
+  public void setAllowedContentTypes(List<String> allowedContentTypes) {
+    this.allowedContentTypes = allowedContentTypes;
+  }
+}
diff --git a/src/main/java/com/example/blog/controller/ArticleController.java b/src/main/java/com/example/blog/controller/ArticleController.java
index 7db61a5..636ff39 100644
--- a/src/main/java/com/example/blog/controller/ArticleController.java
+++ b/src/main/java/com/example/blog/controller/ArticleController.java
@@ -8,22 +8,17 @@
 import com.example.blog.service.TaxonomyService;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
-import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.Model;
 import org.springframework.validation.BindingResult;
 import org.springframework.web.bind.annotation.*;
 import org.springframework.http.ResponseEntity;
 import org.springframework.core.io.Resource;
-import org.springframework.core.io.FileSystemResource;
 import org.springframework.web.multipart.MultipartFile;
 
 import java.util.Set;
 import java.util.Map;
-import java.util.UUID;
-import java.nio.file.Files;
-import java.nio.file.Path;
-import java.nio.file.Paths;
+import com.example.blog.service.UploadService;
 
 @Controller
 @RequestMapping("/articles")
@@ -34,8 +29,7 @@ public class ArticleController {
   private final CommentService commentService;
   private final TaxonomyService taxonomyService;
   private final com.example.blog.service.UserService userService;
-  @Value("${app.upload-dir:${user.dir}/uploads}")
-  private String uploadDir;
+  private final UploadService uploadService;
 
   @GetMapping
   public String list(@RequestParam(defaultValue = "0") int page, 
@@ -221,32 +215,20 @@ public ResponseEntity<?> uploadImage(@RequestParam("file") MultipartFile file) t
     if (!"admin".equals(currentUser.getUsername())) {
       return ResponseEntity.status(403).body(Map.of("error", "no_permission"));
     }
-    if (file.isEmpty()) {
-      return ResponseEntity.badRequest().body(Map.of("error", "empty_file"));
+    try {
+      String filename = uploadService.storeImage(file);
+      return ResponseEntity.ok(Map.of("url", "/articles/image/" + filename));
+    } catch (IllegalArgumentException e) {
+      return ResponseEntity.badRequest().body(Map.of("error", e.getMessage()));
     }
-    String original = file.getOriginalFilename();
-    String ext = "";
-    if (original != null && original.contains(".")) {
-      ext = original.substring(original.lastIndexOf(".")).toLowerCase();
-    }
-    String name = UUID.randomUUID().toString().replace("-", "") + ext;
-    Path dir = Paths.get(uploadDir);
-    if (!Files.exists(dir)) {
-      Files.createDirectories(dir);
-    }
-    Path target = dir.resolve(name);
-    Files.write(target, file.getBytes());
-    String url = "/articles/image/" + name;
-    return ResponseEntity.ok(Map.of("url", url));
   }
 
   @GetMapping("/image/{filename}")
   public ResponseEntity<Resource> getImage(@PathVariable String filename) throws java.io.IOException {
-    Path file = Paths.get(uploadDir, filename);
-    if (!Files.exists(file)) {
+    Resource resource = uploadService.loadImage(filename);
+    if (resource == null) {
       return ResponseEntity.notFound().build();
     }
-    FileSystemResource resource = new FileSystemResource(file.toFile());
     return ResponseEntity.ok(resource);
   }
 }
diff --git a/src/main/java/com/example/blog/service/UploadService.java b/src/main/java/com/example/blog/service/UploadService.java
new file mode 100644
index 0000000..c6878e4
--- /dev/null
+++ b/src/main/java/com/example/blog/service/UploadService.java
@@ -0,0 +1,9 @@
+package com.example.blog.service;
+
+import org.springframework.core.io.Resource;
+import org.springframework.web.multipart.MultipartFile;
+
+public interface UploadService {
+  String storeImage(MultipartFile file) throws java.io.IOException;
+  Resource loadImage(String filename) throws java.io.IOException;
+}
diff --git a/src/main/java/com/example/blog/service/impl/LocalUploadService.java b/src/main/java/com/example/blog/service/impl/LocalUploadService.java
new file mode 100644
index 0000000..0b3539d
--- /dev/null
+++ b/src/main/java/com/example/blog/service/impl/LocalUploadService.java
@@ -0,0 +1,66 @@
+package com.example.blog.service.impl;
+
+import com.example.blog.config.UploadProperties;
+import com.example.blog.service.UploadService;
+import org.springframework.core.io.FileSystemResource;
+import org.springframework.core.io.Resource;
+import org.springframework.stereotype.Service;
+import org.springframework.util.StringUtils;
+import org.springframework.web.multipart.MultipartFile;
+
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.util.UUID;
+
+@Service
+public class LocalUploadService implements UploadService {
+  private final UploadProperties properties;
+
+  public LocalUploadService(UploadProperties properties) {
+    this.properties = properties;
+  }
+
+  @Override
+  public String storeImage(MultipartFile file) throws IOException {
+    if (file == null || file.isEmpty()) {
+      throw new IllegalArgumentException("empty_file");
+    }
+    if (file.getSize() > properties.getMaxSize()) {
+      throw new IllegalArgumentException("file_too_large");
+    }
+    String contentType = file.getContentType();
+    if (contentType == null || !properties.getAllowedContentTypes().contains(contentType.toLowerCase())) {
+      throw new IllegalArgumentException("invalid_content_type");
+    }
+    String original = StringUtils.cleanPath(file.getOriginalFilename() == null ? "" : file.getOriginalFilename());
+    String ext = "";
+    int idx = original.lastIndexOf('.');
+    if (idx >= 0) {
+      ext = original.substring(idx).toLowerCase();
+    }
+    if (!properties.getAllowedExtensions().contains(ext)) {
+      throw new IllegalArgumentException("invalid_extension");
+    }
+    String filename = UUID.randomUUID().toString().replace("-", "") + ext;
+    Path dir = Paths.get(properties.getDir()).normalize();
+    Files.createDirectories(dir);
+    Path target = dir.resolve(filename).normalize();
+    if (!target.startsWith(dir)) {
+      throw new IllegalArgumentException("invalid_path");
+    }
+    Files.copy(file.getInputStream(), target);
+    return filename;
+  }
+
+  @Override
+  public Resource loadImage(String filename) throws IOException {
+    Path dir = Paths.get(properties.getDir()).normalize();
+    Path file = dir.resolve(filename).normalize();
+    if (!file.startsWith(dir) || !Files.exists(file) || !Files.isReadable(file)) {
+      return null;
+    }
+    return new FileSystemResource(file.toFile());
+  }
+}

From ca844fb141a9ed9ba3cdbc909f70d02b321ae51f Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Thu, 9 Apr 2026 23:37:04 +0800
Subject: [PATCH 07/12] chore: refine ignore rules for uploads and local files

---
 .gitignore | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index fd72fca..3e0ae84 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,8 +25,11 @@ Thumbs.db
 .factorypath
 
 # Local database dumps / backups
-blog_db_backup.sql
-*.sql
+/blog_db_backup.sql
+*.sql.bak
+*.dump
+/backups/
+/backup/
 
 # Local runtime data
 uploads/*

From d13f223b9461d0814e99ac0d4bfe134863a4a0ae Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Fri, 10 Apr 2026 00:05:42 +0800
Subject: [PATCH 08/12] chore: stop tracking IDE, root com, and runtime upload
 files (remove from index)

---
 .classpath                                   |  57 -------------
 .factorypath                                 |  84 -------------------
 .project                                     |  34 --------
 .settings/org.eclipse.core.resources.prefs   |   5 --
 .settings/org.eclipse.jdt.apt.core.prefs     |   4 -
 .settings/org.eclipse.jdt.core.prefs         |  20 -----
 .settings/org.eclipse.m2e.core.prefs         |   4 -
 .vscode/settings.json                        |   4 -
 com/example/blog/FixDb.class                 | Bin 2300 -> 0 bytes
 uploads/04e0172863d1435cac24ee85bb0e6cb8.png | Bin 13316 -> 0 bytes
 uploads/3b7a5bbbc5af439ea132cdd4f4338395.png | Bin 20653 -> 0 bytes
 uploads/806b52c27a6842d1ba6d6f4530ac9024.png | Bin 13316 -> 0 bytes
 uploads/acb36b8e7c3847aa8ea8abbd228c445f.png | Bin 13316 -> 0 bytes
 13 files changed, 212 deletions(-)
 delete mode 100644 .classpath
 delete mode 100644 .factorypath
 delete mode 100644 .project
 delete mode 100644 .settings/org.eclipse.core.resources.prefs
 delete mode 100644 .settings/org.eclipse.jdt.apt.core.prefs
 delete mode 100644 .settings/org.eclipse.jdt.core.prefs
 delete mode 100644 .settings/org.eclipse.m2e.core.prefs
 delete mode 100644 .vscode/settings.json
 delete mode 100644 com/example/blog/FixDb.class
 delete mode 100644 uploads/04e0172863d1435cac24ee85bb0e6cb8.png
 delete mode 100644 uploads/3b7a5bbbc5af439ea132cdd4f4338395.png
 delete mode 100644 uploads/806b52c27a6842d1ba6d6f4530ac9024.png
 delete mode 100644 uploads/acb36b8e7c3847aa8ea8abbd228c445f.png

diff --git a/.classpath b/.classpath
deleted file mode 100644
index df66b20..0000000
--- a/.classpath
+++ /dev/null
@@ -1,57 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<classpath>
-	<classpathentry kind="src" output="target/classes" path="src/main/java">
-		<attributes>
-			<attribute name="optional" value="true"/>
-			<attribute name="maven.pomderived" value="true"/>
-		</attributes>
-	</classpathentry>
-	<classpathentry excluding="**" kind="src" output="target/classes" path="src/main/resources">
-		<attributes>
-			<attribute name="maven.pomderived" value="true"/>
-			<attribute name="optional" value="true"/>
-		</attributes>
-	</classpathentry>
-	<classpathentry kind="src" output="target/test-classes" path="src/test/java">
-		<attributes>
-			<attribute name="optional" value="true"/>
-			<attribute name="maven.pomderived" value="true"/>
-			<attribute name="test" value="true"/>
-		</attributes>
-	</classpathentry>
-	<classpathentry excluding="**" kind="src" output="target/test-classes" path="src/test/resources">
-		<attributes>
-			<attribute name="maven.pomderived" value="true"/>
-			<attribute name="test" value="true"/>
-			<attribute name="optional" value="true"/>
-		</attributes>
-	</classpathentry>
-	<classpathentry kind="con" path="org.eclipse.jdt.launching.JRE_CONTAINER/org.eclipse.jdt.internal.debug.ui.launcher.StandardVMType/JavaSE-17">
-		<attributes>
-			<attribute name="maven.pomderived" value="true"/>
-		</attributes>
-	</classpathentry>
-	<classpathentry kind="con" path="org.eclipse.m2e.MAVEN2_CLASSPATH_CONTAINER">
-		<attributes>
-			<attribute name="maven.pomderived" value="true"/>
-		</attributes>
-	</classpathentry>
-	<classpathentry kind="src" path="target/generated-sources/annotations">
-		<attributes>
-			<attribute name="optional" value="true"/>
-			<attribute name="maven.pomderived" value="true"/>
-			<attribute name="ignore_optional_problems" value="true"/>
-			<attribute name="m2e-apt" value="true"/>
-		</attributes>
-	</classpathentry>
-	<classpathentry kind="src" output="target/test-classes" path="target/generated-test-sources/test-annotations">
-		<attributes>
-			<attribute name="optional" value="true"/>
-			<attribute name="maven.pomderived" value="true"/>
-			<attribute name="ignore_optional_problems" value="true"/>
-			<attribute name="m2e-apt" value="true"/>
-			<attribute name="test" value="true"/>
-		</attributes>
-	</classpathentry>
-	<classpathentry kind="output" path="target/classes"/>
-</classpath>
diff --git a/.factorypath b/.factorypath
deleted file mode 100644
index b9002e8..0000000
--- a/.factorypath
+++ /dev/null
@@ -1,84 +0,0 @@
-<factorypath>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/thymeleaf/extras/thymeleaf-extras-springsecurity6/3.1.2.RELEASE/thymeleaf-extras-springsecurity6-3.1.2.RELEASE.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/thymeleaf/thymeleaf-spring6/3.1.2.RELEASE/thymeleaf-spring6-3.1.2.RELEASE.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/thymeleaf/thymeleaf/3.1.2.RELEASE/thymeleaf-3.1.2.RELEASE.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/attoparser/attoparser/2.0.7.RELEASE/attoparser-2.0.7.RELEASE.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/unbescape/unbescape/1.1.6.RELEASE/unbescape-1.1.6.RELEASE.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/slf4j/slf4j-api/2.0.13/slf4j-api-2.0.13.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-web/3.3.2/spring-boot-starter-web-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter/3.3.2/spring-boot-starter-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-logging/3.3.2/spring-boot-starter-logging-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/ch/qos/logback/logback-classic/1.5.6/logback-classic-1.5.6.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/ch/qos/logback/logback-core/1.5.6/logback-core-1.5.6.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/apache/logging/log4j/log4j-to-slf4j/2.23.1/log4j-to-slf4j-2.23.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/apache/logging/log4j/log4j-api/2.23.1/log4j-api-2.23.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/slf4j/jul-to-slf4j/2.0.13/jul-to-slf4j-2.0.13.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/yaml/snakeyaml/2.2/snakeyaml-2.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-json/3.3.2/spring-boot-starter-json-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/fasterxml/jackson/core/jackson-databind/2.17.2/jackson-databind-2.17.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/fasterxml/jackson/core/jackson-annotations/2.17.2/jackson-annotations-2.17.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/fasterxml/jackson/core/jackson-core/2.17.2/jackson-core-2.17.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.17.2/jackson-datatype-jdk8-2.17.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.17.2/jackson-datatype-jsr310-2.17.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/fasterxml/jackson/module/jackson-module-parameter-names/2.17.2/jackson-module-parameter-names-2.17.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-tomcat/3.3.2/spring-boot-starter-tomcat-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/apache/tomcat/embed/tomcat-embed-core/10.1.26/tomcat-embed-core-10.1.26.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/apache/tomcat/embed/tomcat-embed-websocket/10.1.26/tomcat-embed-websocket-10.1.26.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-web/6.1.11/spring-web-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-beans/6.1.11/spring-beans-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/io/micrometer/micrometer-observation/1.13.2/micrometer-observation-1.13.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/io/micrometer/micrometer-commons/1.13.2/micrometer-commons-1.13.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-webmvc/6.1.11/spring-webmvc-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-context/6.1.11/spring-context-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-expression/6.1.11/spring-expression-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-thymeleaf/3.3.2/spring-boot-starter-thymeleaf-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-data-jpa/3.3.2/spring-boot-starter-data-jpa-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-aop/3.3.2/spring-boot-starter-aop-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/aspectj/aspectjweaver/1.9.22.1/aspectjweaver-1.9.22.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-jdbc/3.3.2/spring-boot-starter-jdbc-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/zaxxer/HikariCP/5.1.0/HikariCP-5.1.0.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-jdbc/6.1.11/spring-jdbc-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/hibernate/orm/hibernate-core/6.5.2.Final/hibernate-core-6.5.2.Final.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/jakarta/persistence/jakarta.persistence-api/3.1.0/jakarta.persistence-api-3.1.0.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/jakarta/transaction/jakarta.transaction-api/2.0.1/jakarta.transaction-api-2.0.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/jboss/logging/jboss-logging/3.5.3.Final/jboss-logging-3.5.3.Final.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/hibernate/common/hibernate-commons-annotations/6.0.6.Final/hibernate-commons-annotations-6.0.6.Final.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/io/smallrye/jandex/3.1.2/jandex-3.1.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/fasterxml/classmate/1.7.0/classmate-1.7.0.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/net/bytebuddy/byte-buddy/1.14.18/byte-buddy-1.14.18.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/glassfish/jaxb/jaxb-runtime/4.0.5/jaxb-runtime-4.0.5.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/glassfish/jaxb/jaxb-core/4.0.5/jaxb-core-4.0.5.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/glassfish/jaxb/txw2/4.0.5/txw2-4.0.5.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/sun/istack/istack-commons-runtime/4.1.2/istack-commons-runtime-4.1.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/antlr/antlr4-runtime/4.13.0/antlr4-runtime-4.13.0.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/data/spring-data-jpa/3.3.2/spring-data-jpa-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/data/spring-data-commons/3.3.2/spring-data-commons-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-orm/6.1.11/spring-orm-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-tx/6.1.11/spring-tx-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-aspects/6.1.11/spring-aspects-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-security/3.3.2/spring-boot-starter-security-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-aop/6.1.11/spring-aop-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/security/spring-security-config/6.3.1/spring-security-config-6.3.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/security/spring-security-core/6.3.1/spring-security-core-6.3.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/security/spring-security-crypto/6.3.1/spring-security-crypto-6.3.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/security/spring-security-web/6.3.1/spring-security-web-6.3.1.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/com/mysql/mysql-connector-j/8.3.0/mysql-connector-j-8.3.0.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/projectlombok/lombok/1.18.34/lombok-1.18.34.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-validation/3.3.2/spring-boot-starter-validation-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/apache/tomcat/embed/tomcat-embed-el/10.1.26/tomcat-embed-el-10.1.26.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/hibernate/validator/hibernate-validator/8.0.1.Final/hibernate-validator-8.0.1.Final.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/jakarta/validation/jakarta.validation-api/3.0.2/jakarta.validation-api-3.0.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-starter-mail/3.3.2/spring-boot-starter-mail-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-context-support/6.1.11/spring-context-support-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/eclipse/angus/jakarta.mail/2.0.3/jakarta.mail-2.0.3.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/eclipse/angus/angus-activation/2.0.2/angus-activation-2.0.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/jakarta/xml/bind/jakarta.xml.bind-api/4.0.2/jakarta.xml.bind-api-4.0.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-core/6.1.11/spring-core-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/spring-jcl/6.1.11/spring-jcl-6.1.11.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-devtools/3.3.2/spring-boot-devtools-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot/3.3.2/spring-boot-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/springframework/boot/spring-boot-autoconfigure/3.3.2/spring-boot-autoconfigure-3.3.2.jar" enabled="true" runInBatchMode="false"/>
-</factorypath>
diff --git a/.project b/.project
deleted file mode 100644
index 52f6c05..0000000
--- a/.project
+++ /dev/null
@@ -1,34 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<projectDescription>
-	<name>blog-system</name>
-	<comment></comment>
-	<projects>
-	</projects>
-	<buildSpec>
-		<buildCommand>
-			<name>org.eclipse.jdt.core.javabuilder</name>
-			<arguments>
-			</arguments>
-		</buildCommand>
-		<buildCommand>
-			<name>org.eclipse.m2e.core.maven2Builder</name>
-			<arguments>
-			</arguments>
-		</buildCommand>
-	</buildSpec>
-	<natures>
-		<nature>org.eclipse.jdt.core.javanature</nature>
-		<nature>org.eclipse.m2e.core.maven2Nature</nature>
-	</natures>
-	<filteredResources>
-		<filter>
-			<id>1772106509438</id>
-			<name></name>
-			<type>30</type>
-			<matcher>
-				<id>org.eclipse.core.resources.regexFilterMatcher</id>
-				<arguments>node_modules|\.git|__CREATED_BY_JAVA_LANGUAGE_SERVER__</arguments>
-			</matcher>
-		</filter>
-	</filteredResources>
-</projectDescription>
diff --git a/.settings/org.eclipse.core.resources.prefs b/.settings/org.eclipse.core.resources.prefs
deleted file mode 100644
index 839d647..0000000
--- a/.settings/org.eclipse.core.resources.prefs
+++ /dev/null
@@ -1,5 +0,0 @@
-eclipse.preferences.version=1
-encoding//src/main/java=UTF-8
-encoding//src/main/resources=UTF-8
-encoding//src/test/java=UTF-8
-encoding/<project>=UTF-8
diff --git a/.settings/org.eclipse.jdt.apt.core.prefs b/.settings/org.eclipse.jdt.apt.core.prefs
deleted file mode 100644
index dfa4f3a..0000000
--- a/.settings/org.eclipse.jdt.apt.core.prefs
+++ /dev/null
@@ -1,4 +0,0 @@
-eclipse.preferences.version=1
-org.eclipse.jdt.apt.aptEnabled=true
-org.eclipse.jdt.apt.genSrcDir=target/generated-sources/annotations
-org.eclipse.jdt.apt.genTestSrcDir=target/generated-test-sources/test-annotations
diff --git a/.settings/org.eclipse.jdt.core.prefs b/.settings/org.eclipse.jdt.core.prefs
deleted file mode 100644
index 5b72ee1..0000000
--- a/.settings/org.eclipse.jdt.core.prefs
+++ /dev/null
@@ -1,20 +0,0 @@
-eclipse.preferences.version=1
-org.eclipse.jdt.core.compiler.annotation.missingNonNullByDefaultAnnotation=ignore
-org.eclipse.jdt.core.compiler.annotation.nonnull=org.springframework.lang.NonNull
-org.eclipse.jdt.core.compiler.annotation.nonnullbydefault=org.springframework.lang.NonNullApi
-org.eclipse.jdt.core.compiler.annotation.nullable=org.springframework.lang.Nullable
-org.eclipse.jdt.core.compiler.annotation.nullanalysis=enabled
-org.eclipse.jdt.core.compiler.codegen.methodParameters=generate
-org.eclipse.jdt.core.compiler.codegen.targetPlatform=17
-org.eclipse.jdt.core.compiler.compliance=17
-org.eclipse.jdt.core.compiler.problem.enablePreviewFeatures=disabled
-org.eclipse.jdt.core.compiler.problem.forbiddenReference=warning
-org.eclipse.jdt.core.compiler.problem.nullAnnotationInferenceConflict=warning
-org.eclipse.jdt.core.compiler.problem.nullReference=warning
-org.eclipse.jdt.core.compiler.problem.nullSpecViolation=warning
-org.eclipse.jdt.core.compiler.problem.potentialNullReference=warning
-org.eclipse.jdt.core.compiler.problem.reportPreviewFeatures=ignore
-org.eclipse.jdt.core.compiler.problem.syntacticNullAnalysisForFields=enabled
-org.eclipse.jdt.core.compiler.processAnnotations=enabled
-org.eclipse.jdt.core.compiler.release=enabled
-org.eclipse.jdt.core.compiler.source=17
diff --git a/.settings/org.eclipse.m2e.core.prefs b/.settings/org.eclipse.m2e.core.prefs
deleted file mode 100644
index f897a7f..0000000
--- a/.settings/org.eclipse.m2e.core.prefs
+++ /dev/null
@@ -1,4 +0,0 @@
-activeProfiles=
-eclipse.preferences.version=1
-resolveWorkspaceProjects=true
-version=1
diff --git a/.vscode/settings.json b/.vscode/settings.json
deleted file mode 100644
index e012065..0000000
--- a/.vscode/settings.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-    "java.compile.nullAnalysis.mode": "automatic",
-    "java.configuration.updateBuildConfiguration": "interactive"
-}
\ No newline at end of file
diff --git a/com/example/blog/FixDb.class b/com/example/blog/FixDb.class
deleted file mode 100644
index 746589dbe2aafcf80253375af9884e73f3206e8d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2300
zcma)7K~vjS5dI!u%NPN{0fSRQ6hbHvf<u$g#12V~F@?qkiVZZO4SAMdut1hvNhZ)s
zZ@qP<#~gakp{L|POQzG@GM#pMX@5;FO;@%tcpywY9zALGz1?rWx4Zh|-&el@h+)f*
z1~f`&lHq}u;mjuA=3$*18{viQrcfOQ?;Xw1oVyH-L&GaR_!u@fb6GV~*tNgbBjK=a
zs$9>TwiCI2{n|u0tD76^x$M1?Ez;@a<P)yjVvy^)`E;?A)iw3L*j*BirHO5>PdZjf
z4BEol7FI?ph;K|oOvY@DhtqkYkms5YeugH?G#wvghL)X8UDJf%6Sv3xXhXY%Gcr05
zU<j6(6Q%I9rIEiBH~5CI7+N=k6E_WmlF>|qAvKgdOfpSOjE(63u?$y0ZiGX3(H3-~
zOF~daH+mS()>s^37}`}!a7Uyax)g*#q6UYKxU1Qt%{Ye-B=pKSkG{IoNblOTmkz-!
z(e|zi7tIVW5`TxX5WEoeK_So8z#^wOrjp|h&vILg`O%L{5(Z>k#^3?Z`uz-2(e<X2
zNL?q0<evTz!`)ailUPzRv8iN2p;NYOCABa;H}gQrX?9WPyXyuo2xTR<6rYVP4c)vp
ztV}0nV#~>lGQXTmwqOKTB#g?qiZO;jO|Y5@#6#=|wd9ER@ObFMHHLFD+72aI7gRO%
zQo$IL@X<kv<x)=UsG{hez8~YbA>$?{82nThDPh}GB@CSh=TXL2t0F)xa!bZ-L>RgY
zd`pnDDtA^jCr@{_!wtt~7(7X;;|1lz9frtzwKFtz>r~x*pcV{Pa;|}^`3Asn%M~^z
zW6Et~kE)xtkT6{*Lnd#TPkB}se#9{&<5SF1d+=N?T`CqWl0xJddXA=3+YudJaVtIM
z3V2^e(hbsHt`<5rbt_|WmBP&vL)9#V#SSkNby1!LVWK>pr6!J>ITE@(sTpFvRLD}t
zyHw~!fooK8!J)O|q7APQ!E%HYFP8BVmMNzbpb}Q=8>ZaZbj)e9WT|3Cb7T3-WX9Z@
zBk&ZB72C0RF(sV5nX`TPlA$+YS*E2t(ROGs)KynRVLm(}h3XIoXF+e<y?E>gM^=LB
zmJO*na5!o-W82&k;Yw{)DrttRj%n>OJUc3S6<8rP%Z;2a?17|dZk39s530J2ncbo|
z0e)1u%7l+rCsDcbt1jX+u+y3&q73pJjZQ1Bb1Dy8!Un_TV>z8fRf5LQcRG|lE|t7+
z5h?l*xxWUgW%?A+b%CDF)5>V|jQkAtf^HZV>FT})BsAl5EYUqd*;_QiN7jD=QZmq-
z3bf2$8NK=oS|d%NrhS~H=JUKnC~#p97ek)Fhx-_Az^ZErljS+OB3^n3dG~Pr6+Q+k
zu;?Ld@;K~X74`-rA<sTOVR#ND;thG;AXqcV5h>&iNqb0yystw|E|&PrRj?k{5Ud$w
zceBeO5%Ro#4!_HN51+lDRQqv*XpLhIYj{NKITZ0N_3?N39zW39fgkY`tuL{UUukW|
z@A#8&4Q0Wy=pkvENg_Xq*Ftx#w4;r@oFUJh7)2NP@1Y1mD%@_0(u*{yzXpY(_2Drt
zP`rMM*h+EwDN-x>AD{^R_zRctH+@#p6v08;J96Tckdd%*@b8ppHZcj~9b_Hvn3oWL
zM}ei|D0<@p<G#0OIDj2@c8HlGe_qP!3yR%<2Y5(p8{Mr_QLL4(UqO(~PtQ+~$0kDm
E0Y_?32mk;8

diff --git a/uploads/04e0172863d1435cac24ee85bb0e6cb8.png b/uploads/04e0172863d1435cac24ee85bb0e6cb8.png
deleted file mode 100644
index c09ad0c735b57d39877b5e8f4fa856c2a72021e2..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 13316
zcmeHud0bOxzBd-dI<j=etAasj$BMKraVeWDsY^wRfVLe0Spp(D3Q5>^a@-2nR>&wQ
zR3Oo!#FixpVptP2l~f|eh!7wo5o1Uogb<PdSx(M90iCyfd+WTP``)>C=HC91vm|+*
z^ZcIQ_I<v;=bS$f;A{1}RlhScGqc*aclT#zW(${^nJuV#+XDWk(!s$9pB5y2=DX9Z
z_Obmae6#TQ4*wlyX157T4N;5W`z7&vLz2wQtQn@y0w(U(Q8Tk`-|XAH<BRkNIbR+k
z+PiAelkW3zKOQx@uh{wCvYk=km*T39+F9P|S}RN<_6CS>P1MRCzAn`Y*TLO&T!>l#
zpAKx<03Xdh%r!mY;|F!7n_IRkOsD0Hx8UQoBf+MdFD&8Fnw|RU@7ZXoF6tftfs%N4
zd+R*L@Z3qX*mu3n>bddE{9>rVGx*u;j2yke)@OD$J1YmwMxbo7+uHH8$H>`E{jgXy
z8Q~y_5#tr4ykdqDBKQb=(C7#s^r3<=JbGv%@fpR=tcd{26wk|!JV5h+j-($bTCfxB
z)_r8=zAA5#h?K`G_pyDHyC|qDg~|LL3w+T|bdgbhZ#GMWTTM1zCOvl)9KwGOX!5hX
z&7958h-dUGWsEahBTH=TKNN(RnU$JGeQ1NRrQ-#8R+YBoQ7_;!465SW*t|(ANOutH
zX}xfam7DgFJ(Qi*6#ue(ky)J`JoC>hr}7Px-C3Ia47<15BIvxx*-relRi-u<nC2U~
zbWx=7@tG-!?zV)feXqU2%*-_!R#Y}c*V$&Y$esnwRiw#4y5xC|hrN3QUYoAvT3>Nw
z=PfN>@Iy`7N0zzVbP)v}8Oo&Ip=4t&Xn1_)L8yME!ol4RI(hE}Sts67$%_DbP*zJH
zQ@=s6PyD4Wox4+GeTG6PHMcN}ylk4b9&M>kb>Lby16IU(g;Oy8a~~k>-dLcPAXEn`
z+?yOW7oF}H-%^>jt_;d{`PjKun129)mdRxcPKCl2bqcXbSjGj`MowGJu2gJD_ZCoT
zwL@vH@3_-LqwN1B%=p#)^j2kUG4}w}Tw-B~c7V-v5&<7NtVEs*I_a75x{(}ZkD)Q@
zo;G}e#%+e7aCOI<0}j92Ka+!cwAf6PRF2&?Br(j2TVyyRlG+@GGPwM!SoW6L#4%X#
zYEP@T9t#aNEAieNY>m2m<E4;DBSt{VG}|J5zQV#et+_39_=u0aZQfGVaL0@0Jjqpu
znTiWeBaCwi(#>tH9Z$^6@Q+}x2~N=+!yDQceT}2Bg}2y{?&EK)$^@t5w-_#;JL$aH
z+LC5quX+qfcG&IRK&o2x>7xi<#;t@zy8tt@nQi|#F8E*P?Em>s`sm=+_?Pzk`g{PU
z%Aq|ZE5AVE{aH=UMtgRa8TjXBC#$7r9=_{)xUZ$Wf?2IW`X=^e5_k1IDZUc>wC>#!
z%fuToH9U{ZM~9)r_m9^|JdRrBocJ4!`q^94A+I+30tiqmr?tANDQ$gX8!g9@>X4n#
z%2Mh)=&YyuC}oLTwV>7ulJO)nGsc=J7Z1F3-f-2FpCbuJq0%hGEqWhFaihkKZ(Pqe
zE(P`LL7urcwBCC$o-Drl(T2CDW%<Ugd@BVnf4a&an=ITzHx72?Kz9}cCx*_U;l7g4
zSwsSrTeYlI#^W1T6>;fpP`u&A%e9#H(P^}F8a*mRON9|qEn4a^nYEF7BWgz-aGOIY
z<>W6rRnMVdzUWml^NnD<rbHws7ZS#1b<GoLgD=VK%vmowFs}R|TAt$1j59~BTN1Qx
zQJN3?>K#obkA9N}oiTz}jPmnD=nBys=t=ZnwPInb+u4L|bbH30?U=ftQcl=F39T$r
zNc>mQP$P$p{y`~9)Yl*Eo6#GaC$?dpu>!L(%ZL#yX`c#-BnABO7+S$&<}a&WenRF?
z1$I%P<)GdQ<RQEvEAPd|+W84-u<Wu(8w{@Op6E;vnCErlK-XfCJ|C~alh=jtq&7^^
z*g}y4k>io!%x)hNA+M}kpptmyfPJphET$rl%VsEpi9<z{U0|Eai&lJBkgPwRtQS6|
zlQ{I8rz#RB={b5{`yjr;G2BT}+&z}L>#CirQSV0n)=QAsQ&o*oGvvjT85{zPzn`Ev
ze_7Imf22GYnK{uT2{UH209uuH_e)($d4MwwH31#2g!M}!VWBKt8Vckgz3C*PIrJIJ
z<wWp1<3R{8gK-sifb5@=8ZvMy$c?NK^*y{7jsRcWeoS?A9q5VmYQH<h)=di?f>2TJ
zAwp?!0Aj|VYASmt9H(Ac%*_N{W@o+dAEx<*;#zVf*LkH+=$<wp&&8XrdXn_qF?P<B
z!R!hWCNt)2Iix+QLI$ieqZaXi6tL+%d@F~|{zHLd5EWSpPHv|IwWL;Dg(HsY{!NH?
z)GCyawXZW-J9@No2=AU@N6E@*g&Ow3PXdElz?Hh0ARTparZFhf+7K`=kkPU;f2{uW
zmF^Rm@56D2$@*~D+Qw*6zHvMO0Zw{U8(05$MC;;dNAF~C|2%7`q==PwWdv2D$*O>x
zJm5M2+yt_&Nr0P@4#l0Y!rVpoCc3W~?w7Ile1!d&+?|}BHIz{iF5GVl>1bE_$+NU!
zAx0fjk=?Ne9U)Y=$w+?f9FhQ=Zam+?nQYwd)5%k|BtnU$NV?Pdr+uYZ=rR`i(g<EQ
z%1;xa%S3bfyzT1!EmZkALq#K{k|W!^>3n(mfN#b!p<#EVS5(vfb}qk>W5Z7HID|vB
zUD3vZD`^ALJV_ZEXajq9(*;uYV{|Jk)CP(ES{XZ2*zGgte<l|c!Y=3l``@U?r02Z<
zp<*@*-H(^bGgRNXHV;(d8#$M|6Nesk?MclnYb{U)XwKhPih5#g19xwtLJvFBNfbBT
zly+!)-giFSf&9nCfoQTW_A}BgOKy0MH}~eRM-Qj7_9sGQsRa%VeRTVWA+ikXkX`7*
zwfh)nBDel{@k%3BBHa=TvM!c25+#3eQQw^Nu-_W}HWB~N7O~dc_wmJ}a#fm_f>YYa
zm8J{U^bT_GE87-7A^gX)>whRE|4(cbthW@PY~bXGY!GSW(Ji&N2~;+BtkJ%Jf}Iel
z<QlQ+0NPzU*5YG|0z~=>KGq)^p?m@nFB945uZiaJ`3QRT*k(+%X2cz9=yuc3FzT9v
zC^1dr8r9Tiu7XE-6z0^+Bc7(DOC~JkV*{W{!cs8naHdaAnAGFRfw{O|9d042Y;L*k
zCYYoRcAx|iC^*;_P;GtcIf@c2H@S5qST!n4daAlgG_QH}(3r_Wf6Uc>5<wN<iD|=$
zZy)1Y5!%}@TY%OV<IVKUjf@mB$#OqCt*MR3I^Q+*{`1bH<tlEPSEv3F4h8M|A=MPF
zk<!%9b<}G>;6C<Bwf&!O%mt~w4QJ~!NMt$M&aFdbu{}<w>CDO~JJH~k({^`XAmMX=
zJw1D)N`eMx+7vDj;l-U&eM35$opS&7X;Y%{YvErqZX6YEd#YONy?AgQB6=rQ04RGm
zPW?d}=83ZrA0ouM5m3wwDwU2W;F~yT2OzUsw9EiD$Ei!7%GdI-`=Bdoh25z3644y<
zSCPe)uEIxzTwZPYLPK%|3Dr5CFoEC5MSz=?j-=<clJ9|?b(3P*?97~Oqp5y6>J5Os
zmt73YRxvNzrn3prVW4=osyn6M5P-ladpq?Hm}u;`EPePhgi0gt3S8959)2vD`uubr
zM}8Gcy$QI0Spk_5JxSLt&$(T2k7aH?rg?yX7|A$-cI_M(achfFxFNu)7IEcvFSdc^
z%ZO1GUKnjGcO4tmpi#yk_MZa2xWe^kZ-J7`|AsB(SoDl!3>hB#HuCzobXvPmaDWb`
z4;^JP5AzO4xW&<_f81Q+pkUG;rYpmGmfRoRas@`aadReyWZ&e;M}^{MwIX9w3!m)&
z{N1a(BRq^%gMO^TRKSl4Eduo$LEbWNXd{gMDqsKOL)4;R{k~oFr}ceu;Zr%V1H$`3
z)4SP#ANw@@6=;7h$wfzgA+S!D6<eo#xG|P*^xzxQ)C!3j2dE7awL#Gpo8UejA9q5=
zByHR9_Ae4%0kOW%b2?H+yc@O{h95`&vIg$tF(<lDSG>j})|<`wyf2gK5XbMiBI~Go
zx1YAv76_fxQkN79-|+$v!WXD-l1Wp3xmd9Mo^s_o;rJ{i&E%eaa^I&Y(C?Zg)A;to
z*aEP>g}jk_8ph+{F_X#!gK(Dg&MN%b$?OV8S8ZZOvw!ooFmJHEV;})6&BNi;B7l@3
zE+K`D?;XtS!SM0#gFW<xnY9waU)o0c2{l=RiK}f_EaauYD8^_VBl2k@ph9M`uW&nK
zUuO;JT{Y5#O2(haN7T4fsj%m%YT&x0`+bVXbo6Usr!U<bJO@=p_umlOG*BV_RU;CK
zbfln0G|C?8dY?mYe0Hn_;~Z3D_~Lm=y5BIX_icI!?uD4VASOD3*N=3hJ4T>vn9<ra
zOD4&AzoTUUf$C^7v=seCbs+QyX)_VEbLwg|>h8n|R!U^>J8@{cqVC51BC>y4x}Pwi
zVYSgC0#BPbiZAV1E@n%pOE<Y06E*Fq({-Gg{lDG|(yr(`LvQC{On>2t9#Wtt5Ju1S
ztRg70g6_=CFV#(v7m8bYkUIvyHbsUOaIcOGEK!HC9pB67zU>$~b4R>=^M<$Y7Q?vK
zXsi&FFiB2jc<0T|>lQK=Y4)H|>}0Jv^im%6gMf8^5VvrtV|OaD-Y6E`?!q$tumW+Y
zRM%LaL3gm`qITFmLx2xvXC+qn?IGzOu&FwC&;;jec!V2(uJ~iN#_;<~TzmcPl)%th
za~Qs5bw`#6Y!H)oE(!<7^UfP*`xqKtF9H-RRz++=5M{HrIHs%%WMOEY&C-K!R9Yw;
z*s}&+1_mIK8yDE%W?JL=nOT5Ct&>i(2S~+NJr~#H6)*cTk%SD`wEZ%?UJ9i;?t|3G
z(?pqe&ChM;;=QKZwU|jivK1t5x=vs1HWKQFB5mH_pvu-J?>xZA>PGKBjOX{BhaDJ>
z>|DZkJj^H>EYZ!BsoU`Ty>V-PI_3YLe)&s0klA%u(SP=}rxflexKo|t=}QQap$lGC
zYrK2|Lu9M7>RwOrFA%cygV^?Ho7dL4-@?NbgzUYK)c_us8v0cB-Z3?4<M;Z!G0oPN
z{|@0$L9W&mc)xb~&2}&M!jUdXUD9Y2?|pojoun>m6x?3?+TQ-o!mqb;Pb_#pmP8k2
z5Cqljdtlz=yFS_qm^aDf^u(SHeJy46(dR#UT&m77nto}RUbUK?b>p!9usd-^`bi*V
z5q98J4Et{u=YO>>Wq&+tLWRY}?BZULMg_w}ey6~uCy7SOan0<iG<h0YnhKK-*8#R4
z8>wz9f9b-+zfNDlX?B*S#$i>CuC9EBy^B%!mG52?k?<{#a1B_en|Y)*>}H348j&>4
zd~Mn(#rG;)b$R8HcM9Qfko7Ik<~pzp%sQFr!%<cKEKKoZ>h2C-VMW-G^0-qg=%Xz&
zjB!jZQ?!{M-2(A=GHnZ2dyC#8RDXVI*oVxD@X5>jep4xU=lNJ;b~bG_l$~D6r+IZ4
zjAZU~q$#Kpio3JYy^>p3gPswtiZ107x}-wFWQ~-2Ib_n>C1FX?EAdyf4SY%SPvqN=
zNYPL(pXg~bv{tt9ans7W3~uRkMv`N#r?=n*<_sMEg&V7hX>ui5RvW=mBN-~;L3>3g
zYGT~O(HTyecd@8T#!>WJ-dvS$dY4O3y+b0hJUDsw%JEiq;cFMDo7n0MC5G^&^uZ0s
z5wlZwdqo>vC!4kM+6cx<0?ObwnJJ=!N|A}}BR;~VX;vj?t=GAIBb*p>kqQN)+N1c^
zD(*E2G?-M|yd@Uq#2sD-gT8Q!pwe+pH>(m@V#Ul}L*!47(L~397NJ&%R`I%l!<%iP
zFWrWw$CNO{rs-!BOiB-2$;Od+-BMw)(vYf~NmggKq~krkg<(HUvem7YwXRPqdb_iH
zzCj1bi>cvWf``4K=0QfU*%wNTn*UTj+5*ckQNau4zzUqZ1hUAIo)i@?obStq8vieA
zs>VEGu|^Q;$>DO;a$BR9=Z>aEjw3|RtQzj-EqB#Lj7}R`dcfq?<zOi~t%YRtMtGA<
z7ew5~pN4;v(1=k^ez!*L+QFsHu#UB~$)`k7JwE)jyQ36=qJTFbZN16s5m(K$ic(v^
zbvn0jS|;5SO9oo6NnU-OX<YwPto08br}SNs2KMjUiTIj$ZOwfOjzmUp4Fe_TCl29z
zCdb{D2XzW}X5(q)Z^Q<zUC%|LS^5-d^;K|PK>z|&leTSdE9Mm~?dqk#s9&T*p^~#I
z93dWSJ=5^=h_A_5WYcR#NyfELlDvU)KUHXd?Y0t}I?Wj|Gn`|1cs~u1?y;|F`v<lG
zTe0B6>ww88kLO|C$Uws`h<Js_w)Vz3{ZxxEZt8O~pjR`TKzvC%sOVDz85!Dia0`V%
zqJ=AOzwy}-+iaZ-I5GJx3M2G)=-NHA53-jbQC7|f)nF%HI}1+gGTa?l^k{eE?kHVk
zd}bSH3SGYnn)F@Q;%Z}7p)f6sP+dW(e3Gr4Ql+d@@ycqQ0UvsJe6zB+N&zl8mrpzX
z>%C+>ytZFVaqT<FAnq?UW`7S1Hc5)ZD-G}x?~`Wi(6eIHT4!!Ke#z4alc)bG=x;x|
z8LOUg)O30oKN?o=I=#c=J=;yU+;qB(N)}mo$*avjVf#gAZaeKy<kkE)>RaC(S=Mg@
z2<rx)Q7(7uHStZxCHJohq{vPt3OCvF@V;LLt(Q59ej^Hmp}QL2e~O%M=sSkmuVzvm
zYK66M9{_hUabPlx$xQc*2%11+Rs4sa5Z<UX!B$&0KFbM69K2R#m7d-zjA8f)^s0Cl
z4oqV<s6rPZao%lZ&PDp{ghbAFZ^YaL7;~p!&Z4(tW|2%QP~Nmf*rL^*gUc!s7J1p3
zvDBWxl>xc3+5mf<37EFx_w%uS&=~U>U2;RBi5|;9{1f^9KQ-PAe%Ns_>HQGB0S1Wb
zV{(`6#F@Q~(~a>kE%<dKcO+h&{(80Tio7Gz68>H2c?v(zqWogP{a&opZ;plfCFrit
zrTx~(wEFnxpNR41ZLjun=u3PIT}+-tCgUj`9_S^*;&=meM82g<12dtFgcdBGq=hf@
zl=qjb^l@{f#%`+PPRL0&^Gu!nt>okA`9h2TR_D@@L5oz`)Xgm1O!-Mw#OJO`R&F+T
z%lIJKDii;Qx*;hOMR$x-6TaoG2f?u?a^O?w(Dv!x>p<%b$@*~Pn5lv`&nu-gbJ*ad
zk0XvEL#SUg4Q5vrp3z!(2_FTnK!Cg`Wj~w%+9|T+w!XmGz&Vg7o!%uC?uLk0iGeW7
zRXxXHO<zEOX{AS-yL<OQYhu=*FkR%rQ`(33G<)ckVQyZX!iYzFQ+S1PvCw+m3_?eB
z%QPb3@>=+Oc`XV~=Mt)@(i2<Kuy0nI%0-OTd2Dj+tWO|q(ku5s5rJyDXQ#g0bxIp(
ziNDJsP@>wxwX3T6Bj}$e5&QHDb4+1>w3}{V#3!yvB|Bsc3-eALh(nf+){P=vC5;t>
zQcCK8wlXJS;Lb|8BDwJ#GLKOVvkX5RRl1`|Btyv0b4o|_ye~SyHAPoy72KiMEw^d0
zCT1DP30!0m!zjl*t6~~lsxePgg=bkLxT}~#<dvC$)P_JfafcU0)MzsBkI;<o3gP;q
zE~sdnyWI^nLK%kH5#Ca7<fqKO7Vo+HK)6CqnV-=9e0*wYD7VI|FS{WOJI+X{LZsw`
z;nXTglSI@L?O&?W56^BFRPw^Hz<`vwtcc}=u0~Cyt^1HZmo$Q9{b`OQ2bgl)34PV*
zkUgUuy{*RCsM~^NytyCPr-kztfGONDP<O~_NG#7J3s)HO@{RR79+Rgk#GUlYp%FG*
z-pnW?LbGhfY(_ppFP<jn(+o-J;S5QV$MCHJRW!C?fDA)|O@~_ad}a$6C`I3XN>TXq
z(Ze~aBR84CoN7sjW8+-O^DYck;w1h#2VCg`7Sk2^M%|65{*Q$P+&{4oVg->ENXm)3
z97k(S;2#4}tKEwz_Xd}+2c|Oa&Pnt{?#rR?gox$Dm6_IexO0_x-qy2G4HVaofr2!}
z9#mYV2(0REHk^yf7&tiagM^(SYr<6^p|Xi>p4Xeo_Fq8cG+wk>w}2_DVzxfmLto3^
zl&n9fraYk^CriGB%L?<OOf9`PwL2<t;2dr}HH7%?Gn(L((1zI!wtE2{OM+YZ?TDs)
zykATE9xA+caM8`gsk8Hm=DhiewA|%veF&E>&70f*@QPlQ3u}@xiEElAPb%iEb7HG4
zepP(zDt3^`D_+$rrxkr3-t3D*Nz#MAr3ILf{vVJZKeZ?*Tk~*GqDU81xW!U9$~NEc
z8!2CkGHk9n&Ifa?)AMxW8~^gl#odpqbWi8Z{}%*NUiEe4T))3H`lp`=*}Ag?HkHd|
zQwgIC&m7Y(P<sKHFmaG55vydaZGb}ryz?_xq`uk}lP7|Z6lm=B$V^6?Y3&hf;vqsS
z0QMd>SL#vMK3_d^v&(MFq0wlosl%jIZhVE?gf=%z!BiCzw3tl*9@Q_+y2*P`LrBSr
z)ddadf+6CU#FbQ^zNE-kTReP^ZQidYl&aI1F>5v=Bsxqjp~oV;+VK8!FkX9Nr^mxv
zlxjB}RfIWC$VrEHk0`*f0H#d*z{SL<>Gx6{_do?|#ptN^BGKID$(#visrNwq+#u}d
z7<C%>GIH?RaW{L{7bmyToA9eu%f9Lng}KgXNp#(JA2(yuFNC`NdBe|`tEA^!=68PR
z2c^&v+ClbZmaOm$3nN))iQ-9_TyMdIoRnh?m<G@qR?8!N3y2fJtkleiP28kw^YhYQ
z;igNNGHMbA-&eGQqrt@8)x_XO!cWuh_Dfgd-plr|rwvK-xE^6msrM({e_jMJCvaYi
z0W>N%74gF4jHOg36}PL?Qy5?DNP<BDnKgz&lJxZtSF-e8^O)fOEav|TSl~gN9K?&7
z27eIR^e(v%BEW;%4>~5(R<NA#vf_o8{k3XC&xn_ogm))_f>Db^;jY>vG|ozq2%nbN
zaQWve&eP0S#ox>d2-^dvG3*OgetUMCmxryJDn+vFLh13vOe<~n)&s6O5z0m+%4g@a
zbBY0LlApHbM;146JI(uEzo{%HcWL2&Wvt=Qk5@=y)%N`nbEzpV4FR55Qy$(lG)qq$
ze2FF?X2sNhK^93$FzP%;@{!G}$s}w0++`OKge~xvF7>;n3SIJpGOSw#(6c;gp0+y@
zz&>p;uRVf5DnUqVMD^!MPGbrNDzFgBa@DDldXHO)L|?GC2vWTk*ufLD#xdZn0<N&}
zG*9Zdk6H}>aEQu#LKi1pp!U)w-%3~#TU?c-qwlZ10&p?8{yG~6$>H5c1!5mDTj<Rm
zO%>%7l<M^fyBr;kV=8EA=2Q;q5|)sx-=fCBWov)7FN`qyehaa1{pNpZuBp3pdW~dn
z{j}B-t_gJy#wL3yE}oRf4yOyurM~|-=<ILd3)34B<EQ?f?>PMDZ+nJ^{NMcE#y^lu
zYmWs#|Jmy!#)`{%R&%ee_}Kkdz132pH5gDaOZTxi#wGc}>M`5*Nx<&fosnn$4Nu`b
Ax&QzG

diff --git a/uploads/3b7a5bbbc5af439ea132cdd4f4338395.png b/uploads/3b7a5bbbc5af439ea132cdd4f4338395.png
deleted file mode 100644
index b0c50bb4f9709424213ee44eb39ca909f418b4f1..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 20653
zcmeHvdsvcL-!4jpCWDrh&V-O<V`GN)Hk0B3%JemJ((Ev4sc1E0?ec6X%0bPva!Na?
zQz}{GI87;)l}ErLL&e0hB=bOMh(wBj2*~NfneW{j?fc$qUwiLsu6MuVA71jH&$HHZ
zuix`~e)qcXwa)Aa@cnGz7YhLZz-NA2y>|itKrjGcj4)ZC|7P*AJc<67QQ}TtFF;iX
zRG>eY7qxl&W&q$`o|!swzW&%WZfi&)005y+{}?f1e?0^M?C|pQ-n=^{e3bG$eiid#
zwC1z4H+0zK#5w;9?!PSb%`A;L(R_HrLh-!ofWVx^r{E`yO<kd;&Sx{Oi(2+Eqd5+l
z3b7mG*eE#t_?S*^s&54V7zaS~9h?4O@o)MezYLVEQ<8MHSr(G#uJ<0oZL{+0Bw^Wb
z>j~p53ooss=K*-eq>>1xJGVceXJlA-omd6|Pamz#0RnBaJ~~3Jt+OMG_Ci1lyii1<
zmfhRSCu#<!!rMf0mQFgURl=EUI7z1wjw?w_QBCO<j!vdL+B!v16e%<q{T~*=ms`T6
zYby9tXb~+C!}*A9XK)o?U_3!R{;tl>?K+KG-b+L2H0}eFGBrm|#B1Huv9-M0FNEqT
zHGkDW0iTH0)zuRE{c1FcYK~eH#aardJEPs9)?34pf*Ou5QjJU&cdPJMaPfF6n*~*W
zi*4f$DQab2XxNvM4DN(V=aB@nCg`;4JRXUm#14{<ARR|e^xJ!6f7}SQE}{_#I+YX?
zt3!o%<n&%0P7-TnMk~T=YX~;x>%}NGM<=>xrtj)`JwUH`FXro#A;v^SkuHVUKx^T&
z^!wl%EogQ5#0k@rRHAl3C3vEl>XU=AyD8nFsGyd*o=fUzZc~%`Ts6+^F1NK<IKK|j
zR3l0xDULKht5^uvg`$7zjN}dPI-3-cf*x@3kfY(#r=yuyi4>jk#py`xAy?=8`Xz8{
zSoks0O_c|MO<V0|amP!iwFgfPNTAG$Wpa+LYs=p`q%-aMSZ?RI*0*RsJPDE4A)UX*
zFO1g>ZD$dZ1cba4XXSsML!4N(3oO0LZQAtVWkQ6jPD^{@BYw^jILRAm&KSh~uKAM*
zk$CE8o;jEg7an;oh!<wOQ=u;=z2zpMH5(4sy}^_UH44_S;_B3*a$nGA_c?J95!z=;
zDR2wxshQTbUNadNPZ7z9c7g|T0YOLTA!S6q)rZwBe`$s-bnzf&fYN|TscPV(G@e<q
z%m!JQ@*0rde=50AK^smLlOSM$??r+QB+wkp1_q>-KBwheS7nv3(fWwyOkGue(}L2E
zh;n%pmW@`71$F0+cB{y(ITxM-x2a$J%={U+W$MDum>gm$%(}p{kl*K);@r*xgBI*8
zY{;ED*IUTR$$j4-idGX^M~!TWx;%7bZ~|owvACAreM+0!J1UZ9a8rZdq_&TiZO)^p
zoK^@}*K`oNg!QhKleVJ46trMCw)nZ3;_G_WUQq{Hb?<ubi}|?5I2MLneY}h|a6+Y0
zzh%=izeHzm0ZJ2pkDjrW#Gy$X$(PfcQkC+e#N31_A45!v5{VI~$uA_bsZf5dI*%To
zCzoof<TRLd0H~xlaKj@~vPN1A0grN<?&^L=IRsJVQe2prY^_l6hp)dNM7W+u1qEwi
zSrA~JR&oz9#%7~2@14j>k<=(c*c6va?G0Qzm=USDN*ixix5q`SIQ8O`=vm&I5eBh4
znc)rrv&}|Ta9%6ubma)DAC%2w-J@#7Y`TDT+-*guNZ*wS;eED*U$?ApJA$Pg8PusM
zLq`)_74E-}0l$Id{2rJ|rOL;KXiz-zR}VF_g<+;*mU)4)hsZfy(vonMw&^;i5S^>d
z^~V-|gMsa~9zL!=`SK6gWc9FbRMH|FM3!!(DUPTJMm#N~0ic+n90>UBS5RxMDo%Cl
z*_0ohC?q}Zek{1Cc4JkmH+T}g;*se;tMc*ssFJ#L)Ih+(`PkYwEYRtwYS=REaSxL|
zZN*-Cs1|J-0LmspYDigkNMEa~lO9*YH?)!T*@yL+J|0SW#x5<=VdENEQygJ$SRSpe
z1+8PBi*Zt8G^_lkWa^?g=Q`Ln{UxpeA14&K5_H2#SovsEoRXg+9r~7yUJJ^h*-vMZ
zc!X$zctIE$flt;F1JT+<?UFKH(_PK2Cjw;*W+;i%wRt!xq84f4m~&=Gehp%*KdD~-
z2u_yZ-nsJA^cZ^3@^vh_IDfp1y*J}nKY4V;xSGH|xf8YKeJI3F(6#J7?e_qv3ok;$
z`lBdCH1!)6mg*4)H3y~sNYK3&-jTa|4ySBY1QQ<|7G~09E1EJgZY_s^53xfK7iqQm
zUml9pXCr4Yy)i+bRq#J34{a6=KWID|*g}1hkr8Q~jpgaXBP+k;6c9*v220!Y{WGz3
zHv=umj<g=Wq93t;`j#;13DM_D{VRkFg@Cgx?pN!(tAB-rBcawNwuhqrSJM_=EggSq
zgI{|$Sa@yqe*~3uy?_NACIx%Ew$$Mld7VzY(cs|QfU}albbb(wc>LRhdW&&74P+Ht
zhxAuH9lQlAh5$Cad*1<z{jD&&tU1B-yHg29>B~YJdBcvQmbn$Fac+S2^h@q(jkm(T
z$X>==9lW${K44#*xZqm#gFwg9503=^XJEkCNAWMIN38cb7Dnt@V+A<;xOsm}$4k_`
zl;1!Vz$UP3T{Yv{hw{k7_d+xGl!XGW&!6kS90GF){A(kS@dXNHP9xy8`y`V}Z5m}X
zZn{LpkaD`tEq}^r+G>y_rW$e3s*YU)=MShg+7pSrt7Ao^+>JE~SExw(&`Oqidq14o
zvHk_Eo-|p{m-AKo3EMr)^Wqbt@?2i~(>o8;&AaVY_v7GqS#6IF5z{#$QmjkEA@R0}
zyhECgX`XlHU*{8d+f{HFI~#IVD!(#p_@lb4tAM_FLM8Ps90t<A^X*s3UzsYY%#5Lc
zS1B;q(9GQSd6Uvu^BrMv_~SBe=$9@Hjy08%Wj7)7qY8+ykjYzH2V(t2<M9|f)__s(
zwjQJCirN(B^N_dp%K~NZCVG_g+=I%-pn==|GGV0?2W6hq4LsR-zHG}z8>ev(k7unV
zo&&p`KHHMZTYP6BPx3z=aquB2YhDL=piCThQgJ_r9gheu*J+YV5zQ{gu)*;LS+v^H
z^Ubyi!Oi#lMwzzSOxA@DkaMQAVTk@rK6m}h1Y2k&wa>{^2T6Rgqb|^dbx-64{0{lj
zpf>J9(&&9$>{5kN24Ul?K&7~%l<|El$CBFx>-V3s?Y_||C6c%9juX1?7BNLEPP(n(
z?O|K3MqO;~UZ`~WC58h|^%{ZK?aDi<%Zl{T5<1tLeF`Ra{l&Q4J61spHV>$aIt42=
zV_{eIz~pMA(!R^hU15X5SX#JxKqKlp%0mZw+&KmdP15bK6WsiOVbGb?D?`H5>ehR*
zCgID%({pS3ip%i_#JkM{NF}e2>_tId$jv>HQGk&fn2yFe1x)}h<0IWBKX&u9489E^
zqDg8IH#2@3i_YaHof&s%^}T<|f-Ukp8&n!dr8Zcbv!pqoY@w8tjG}DP9eoJ3E&x^4
z^lMR8tq;Au3GFwD)Xv-)?T<XLWI@2W=7qVU>iLCKWVjkGs-P9##l^-;<2&-Y4tAex
z{_Q1GddypnozzqoL*PQvd=}kv_Apgr;~Ot}*Yvq;+gRXrnSY5aDqZCfC`Blhvd%r-
z(d37HIz0!eVZ|T&@nCBsDVMv?g1r(sny_wBJcV<nOBzGjwE%B8L_Mtmm*m}Knd)`#
znQ_xCN#%XTctw0m%#~ksYRl|qRUxd$m_<KW+}AU-{U5LV9SHKUT|@K*zl5kG2&)%C
z54dT3e(jW`l^tk4Um3qQ#%Ww6vd1z8m6C^4sVQ9<M&4xvBYGCYhz{qEZocD_&~pS!
zeVDZq!Seg5@e6~Tg>tVzq`12st2<mEiV3wz8){KrkE?4!sl=lxYg|1Mt{(A}t!%n>
zyeUpR_4>8^9X931nWe<{fZKOty-!@+k1JfQEsyk*Oa*LTrmiM;$q|duiHJ+WgL#fM
z%`cInM+GmjIu)Ndxo@$ahbq4r6zxsgzvd#-m(RZ=+9ZfNMk9cPK_QRV8a`8riM{hH
z$mFmD2~WU$Ppz&Y$M!uH*`rAzPA{9`HrDsM3dt@WKk~Vzvj#4x7*TZ-8jC(a(P(>B
z42evDs1SvTw6EC}e{=O@7bFeIuQ(1!r5Z7D^;eYceZl<q_@QWa!b|zaQhrMB4@Ui)
zFQ}Iw1`-krCeJkQ@^r<AOPZAlDYa05_c$+gJ(chzE|IpXUNd%&p*m&N0?K~fkCY=g
z31fB3pGb$WDcLh&nqQjea60$^IYQ}=gA0v@f|NV#0u18<e;2xJ<J09%A4TXzu9ycT
z>6IEi!|SmJGf{!)`L5Nli1X%8q~l=w<jIs>l&`_-3jFUnTsHIYy%Dp<^o^%MPi+7{
zG|fz7#(A}km#&~cWYZQKjQw2MIETO-0{?ypJTSA(dT@woi?$i%X8oSL#2hQzELZ#b
z+X)Yt$w7ZqH+K3-*W;;AQN|T759%4P7U$~xr*qz!4IVyyLO%gqa18mr;-+VD=QQ=S
z*Q!=#S@6A+_nbeWMErw(3Y0nX07UbDp7H?e46<typvY)e;siW+H@MCv>c}+FKG|gy
zv0&C47ton$P*8x<Kc7{q05+M;bzlyGIRyU25jdz&c&MkQRi9qIN+f$k7Zas=83z{N
z5@P`eUNJ}#6FqfqBDt!!`9d-_O&9v0UJ|dsxt}?~9U5=HZ9j-FrF@5j^*d2Ju5d`A
z*q+xDfKTY+Ni{)-GfQZE?$9Ov)vkcueoDIYyT`Y^VN06@a#rrS8*zryYOIb*DGDO*
zUlA3Kc>8*7g7SGrq;ODEii>#TX40n$VcCT1+7sT@S|U9Gvzhjidr+9eyftF&Q?A|8
zW)*ihJxNjPbhbkDOY|XC7{dCLLGmKm)CHY)mv8xSw!thBkHIj2bg_JY$L@gS=QT7u
z>^$hwBjCxco|3z)5u@4VefjC%fb=}d*uK;@IVYrkN$*YfraZ1e=CuF2)l?3>^_+0?
zreX>{-@MvP%6&Jgk!sYpo=)9*{Nas$YCnLqBos4v8}8@UPZX+>>u{;t&6{RZ9G_!h
zwZca=2fuRMi6S}`K7KvM9O9gOA3JcQ4%-*<ig~cRw<CdCx9)OlKZ2itHJ7t3pE5Wt
zxOJIQcYn^Bg-hQ|K`v{H_scU#bc4A|7E@rX^Gw;<k`cvl5cv8zX+7MCg7oJ83e_D@
zmRjgFa{5x6?!9I9Ql;nE)iTh#*-U+9f!V0tTWPa=&*_RAwK$52*0EoTcgn<2tyUMG
zja>KBHFkfhRw^GmfuuED<{;~_1LIeja#<+<##XowX27S*)8*^|Y|YVWqRdlrD-8LK
zG@<@F+FkVV-EB52G^Ws(L$><pOJoFE#`OPWlUl!>6g)yrZSNJQ(apgVfO)gtQ9ga4
zwWPX+k&dlb`69k*z=Jd<-y{(elHEP9TAx>9ByB3ye_R+{Lu2{GuQR;>w@l6?Jv9U;
zASrxP?1*>J4@nWO;pt=&B6Q5D(5WUYtdVflqQ4=<CA>YSxO7-7uSsyj-61YZ1&qy_
z@>vp}e2?&+8y)mCDri_W;Q8H73TkYyKLx$Cjb{m5gqRYQI>Ak-Q*Kl(md~@fD;t`u
zyy5D}i2mx?4T}nXf2uwB*`Pr@McKQGI&|yzI<=KCqpe8H@|v8JUD3A_tJ8)wF|AgT
z3thH@J<aa_#S;;qyqRFfd4#k1-qEj=HqaQGN?mFL?iMwx`aOqRrKHt_<BGi)I7v7h
zR;d?#cKuXxmb(vdG-!lf4k%!U`+v!k6kl!*95U<-|HHH8-GN{|Z9-TL+S`Z6G+?V#
z{ILGDT18Ww;50~ufYN-;n}DATOjtg=wWirj!}D*wuh+%YS{z!eSC7;fihtr)Cv)VM
z_DD?bP%c@f*s)|PaMFiM7CEoez0SL~C1^P0^T&ZRAmL|7VNh$t9Z)t?BbhHt6%$s&
z7HCJB^4*84oH{yz<MU<~H~x$EXHptQ?bNqJ(N$JFB~>Zp4HEGmE$=yDT>3<f%!jU}
zM7(N!ii5GIT>MBcn$Pp$8kRexk`5sKNuB$kMy7Dmt8X2(+b40jRl>8AD1uYtm!1ID
ztZJyqq(JwU!AP~n?nW$W{&q%I4Jk>c0*D1kD}v3zg>YeA=sVJ45kmXka)D+_y(@i#
z@Y)^*=mqc-YCBh<%^@&{z+WAKx2G(;_TA^@lg>}Zc}?q`r3z85g;%j<{~qL9Uc;|{
zXr7C`Oq6cZcA;H@^?G%eh?>)L=k(k;1m+O<_d;O(yP<LAq*kRqMODkN3RmKVPB}rd
z5ZOqi(#m@gNZhlEGc1)#6FsD@c*^e9494swz%lYkWgdAPTkFB<<qIO~qbV4*b_hK*
zda%jR#DPLGP{B4zM|&rZn~dG7deP3j)Q3#Ey?12ZuTN*{2|HW#{z?~9?QqlG)&1XI
zj%p;THI#@%<S{=Tb@xQ^QDj(18?R$bc=W^iyf(eXu~Jf>Ky!a(SXs;4TN%pd*DZZx
z!y#bbS5Exg314ct<@Lq0Dp}jb_2AFV!GQx|^=)6bC9cb_4E4dKse1X`&V3Lsa!s4I
zWvBOkNx0mtkgggf@$||s#J@F5g}YK&!i_RCxup4MJyOTHdt_o2GlPqxfslIws3igE
zB*v_p+lqohzt<5iKT_9Fd#kri4B=E~ZXe2%dz?)X%EhR`q`Se*x^LSmRK;U7nWmu+
z2c`~C$Ck@$opRP8zMmX{>@X~)IkwFC%10YwLkURdrvbGm7?sI_dA~N#YLnrUFSG|c
zoT@&|26|~_-iWM94nqYs&9S5mr><!AxHLH`jlD<xWlT;<=nNM&1pFcXCK&4I1E*0G
z{s+lT7bj4*Y^4TeRq@hv$1Jt3{OpRidRfV#eNE5)o^7Q;+E@{sAqt~WpF8lnq|go)
znT>TvamEw2!qGZ6XmZL<2$K{&&0IBCcg#?Dmnsp8`>PqiC#n*EvK6<2-{>~+q5l$7
ze{-{<<v_ZAgyXA7h!LUB#lk@7eY-^4V;XHLNmg=m&3oMVX(VN0NEFN4{q_Exc@5!2
z5|g_Ryb_(A8P{Y$RYm9cR;>ww=H_!G=T6givkXn;1-T#DbT12`gG^5r9eplG*>OZq
z8Di%fy$Q(TQdNQDXv;0<(lh(gDo@2zITAsu3d^ZX=<HyqIE{z3(vs5TqZkEpCY)Bi
zfwhf~muRr6H?JF#j9q7$tZr?|49!Z`UikT1Z_K>9)l4ayPXpIbZ(p)3>D>ci3P-+?
zA}$QcV^E8b+EiDYtN>OT{^OKeAzD<8X7G?-o!&O1xmwByv4z)Ufz<}P89B^i+17Vq
z*4=QQdP}ZD|5Cq6$ByNfgz<S#@r%VZZIO$T*Od4N*&$9HcK~Ukrf$4vCtsOJtj5sR
z$`mZ4Zw$#8C0-&ph$%&?_7W>>Q{{*<|4*Op1Dh0C+{15pcjFQ*IyVnGVp~;qZ`W08
zdopa#x(`pi<cDqa!J{5zd6G|62gUivLunj4eB0wi2GSzcWh1V>nfF;mi<F@c!ZS0q
z(B|~Gi2NpUX8+<7?<Y~$l*0{r8>7-46}5Y3YRS;a0^Ni#XW+=ogYcybdCqGM<`?ns
zVkoZTgb`HvoBc+_D`1lG?!lSnkU8Vq90GF){M8Zg`QNhAZuT;<#Z>ryTovcwIc*+h
zeY&XRPqqtZXCJomGC9&(u!Z3EmTvmHdv}oL<Yf{ckhGU~xKMQCKOMYRN{L$m<MKHL
za}I$y1peX(<bDp%VPW)cT^b8xT>H<#h|%j1MAh%iQE6i1I5ze(gNmo3U8D8h-)Y`B
zDrJ)~*UkjqR#Bo+W#PhcY{O#)pDXbY!v3I*)#!sb@Qg<Id{$#x9!&Rr4z%o3`nI~}
zKCUz^<nKKsR}|+`pnbwLN7Nz%K}9%DdFa?j>NZbU=#3FFjYcflI_t{vCQ^zV)=%cf
zBpF|xRp*H#b`>lqtsEg-11+>!lBC0_#A10KvY@r>AvEid4XRF|(JCK(CE5)U)u^DT
zF=pgfKgE&A_aAOhgAEHxrw6I>(wuNlTA8<f`s_szmIb+*HGOvP7ufaXdaNG57Pve>
zw6JoJ_$BXuT6@ViOW3{ae)1^`A}!3z{!{u#`bng}38m&JUS9|2&a8vW&*#qDpIE?K
zIqB1~S;2Jo;5Ox>OH4?pksmyLRSkY?Qz<FGw%(DjHPpS3iW~0zBFe3acNH^8?a*4$
zKvz=4b<6A4Gnq5<+pYC-_~R;29-SKu;3uDm;Sn!RaUBo!>qggzxV(H6L3_MU6oNd=
z@3M`$edxNOEtKj~nwBghCN7(<-t%Vlx=3mdbXiPcR_4b-fbg6ZSie1gqg?rrs$28k
z=jk=_@p@LZp3Oa=7rbKk#{4&Ij>VMgqo&k;>YJOQF4G<7W;fA5JDPvt@ZO;C3!y^|
z8`jo`iIy~zVl}P<f$~<~-8~ya-d@-h>0$ZMo4V|olEBOu)->|JLyoX2(Ehj=!H~g;
z#=N#ggaw9_#ECjN=9$ZR4K#=OelpgD2dH9G`q_DDPVJYr*39GR`CDmCCXKJ4FgcYw
zkWjss7J{hYQ&1=HB}@{x2c0u6|7Oi;H$w(@{;*`sb1#iFwFy>k+4R}W;qYI7@qps%
zcQ8M3_%o)vJJTK<RAiq~`g5wTD7KKka%>#&vV6_rLNxOhbb=(vy@=uLdC7WC&{Vy;
zX`Ja`*i67-+1LV!s*=I#&#%u8NZ&R~du(>RL0OpOUUTDelZg0e7cD#%16i^>FPC>$
zv+o|X8`x6tYb+)()QrCy;v&JE9a3n%6zqbWH)M%D$_=8Jcw)qx|LXFg0~y#X@3f`m
z^N2b`r{Al(6$Qp7tP&=-=N~k#TlY0bycwP|q(OHBJ8ycGL4RmAVDc<xa$`etvN<@(
zSZz1cwmY}(Xbyon1pe{}{Qv4;{nOW_&RJ$>tdg1Y?9L%Dhrs_W0{2}AdO4ATr|M9|
zI=u&0Ez@tG60emMkW#_zKN|Q-bJk86DP|F~9xED$b3Rjh{2E;qG%R?;o4oXl_+h=X
zivjDh`ECRlH*2Nk{Z-w`i3A#vN}&*|VkdD>0-h?Ug!h+zui2HCAu#kz-rWRGN6xGp
z3n}AbZ2kilCd{tHt|~dRYD{~J(F8MON}J%HEMh;AWmkgM;xF$RM$4>=U<PCXVm4t^
zG;7^y5Avdtv~8*a2Ha)nf92Xv7+G^?st`S9Q-@QAY)YcAX-A1sho9HLw#0ulGQ9qT
z(d;GpJg3a$!s|f8f7;#&nyue`j~;O<h^F3@uBf10o7|9>p)^Ehg&x;gYUced6X!d~
z=X91OQKAX;tAi2y47h|_-}tT=UB|(9<k_RKccYf%LR%sa^jz?Rp<$HnsUPy$cZ<Au
zT;ZCcM88y?)rZKphSuYpoK8?g)=YLcxB0*v0&@ub<q;Uw%P;GC5?TU%(_G7@myHLi
z<vu319cRXVgN{nVUj4DDfT?X3t^{^3uj$sr^j2SJ_`le;Ei;#}{pkc?uEGC)N4WnZ
z@h%vy-v}rR=M->k)K|YFP!+DQ3^ctnAOKLL-=*mH5C8A?<4b3;bZ|`=m^{%0YM5@r
N&nLjU$}1xCKL9wu1kC^d

diff --git a/uploads/806b52c27a6842d1ba6d6f4530ac9024.png b/uploads/806b52c27a6842d1ba6d6f4530ac9024.png
deleted file mode 100644
index c09ad0c735b57d39877b5e8f4fa856c2a72021e2..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 13316
zcmeHud0bOxzBd-dI<j=etAasj$BMKraVeWDsY^wRfVLe0Spp(D3Q5>^a@-2nR>&wQ
zR3Oo!#FixpVptP2l~f|eh!7wo5o1Uogb<PdSx(M90iCyfd+WTP``)>C=HC91vm|+*
z^ZcIQ_I<v;=bS$f;A{1}RlhScGqc*aclT#zW(${^nJuV#+XDWk(!s$9pB5y2=DX9Z
z_Obmae6#TQ4*wlyX157T4N;5W`z7&vLz2wQtQn@y0w(U(Q8Tk`-|XAH<BRkNIbR+k
z+PiAelkW3zKOQx@uh{wCvYk=km*T39+F9P|S}RN<_6CS>P1MRCzAn`Y*TLO&T!>l#
zpAKx<03Xdh%r!mY;|F!7n_IRkOsD0Hx8UQoBf+MdFD&8Fnw|RU@7ZXoF6tftfs%N4
zd+R*L@Z3qX*mu3n>bddE{9>rVGx*u;j2yke)@OD$J1YmwMxbo7+uHH8$H>`E{jgXy
z8Q~y_5#tr4ykdqDBKQb=(C7#s^r3<=JbGv%@fpR=tcd{26wk|!JV5h+j-($bTCfxB
z)_r8=zAA5#h?K`G_pyDHyC|qDg~|LL3w+T|bdgbhZ#GMWTTM1zCOvl)9KwGOX!5hX
z&7958h-dUGWsEahBTH=TKNN(RnU$JGeQ1NRrQ-#8R+YBoQ7_;!465SW*t|(ANOutH
zX}xfam7DgFJ(Qi*6#ue(ky)J`JoC>hr}7Px-C3Ia47<15BIvxx*-relRi-u<nC2U~
zbWx=7@tG-!?zV)feXqU2%*-_!R#Y}c*V$&Y$esnwRiw#4y5xC|hrN3QUYoAvT3>Nw
z=PfN>@Iy`7N0zzVbP)v}8Oo&Ip=4t&Xn1_)L8yME!ol4RI(hE}Sts67$%_DbP*zJH
zQ@=s6PyD4Wox4+GeTG6PHMcN}ylk4b9&M>kb>Lby16IU(g;Oy8a~~k>-dLcPAXEn`
z+?yOW7oF}H-%^>jt_;d{`PjKun129)mdRxcPKCl2bqcXbSjGj`MowGJu2gJD_ZCoT
zwL@vH@3_-LqwN1B%=p#)^j2kUG4}w}Tw-B~c7V-v5&<7NtVEs*I_a75x{(}ZkD)Q@
zo;G}e#%+e7aCOI<0}j92Ka+!cwAf6PRF2&?Br(j2TVyyRlG+@GGPwM!SoW6L#4%X#
zYEP@T9t#aNEAieNY>m2m<E4;DBSt{VG}|J5zQV#et+_39_=u0aZQfGVaL0@0Jjqpu
znTiWeBaCwi(#>tH9Z$^6@Q+}x2~N=+!yDQceT}2Bg}2y{?&EK)$^@t5w-_#;JL$aH
z+LC5quX+qfcG&IRK&o2x>7xi<#;t@zy8tt@nQi|#F8E*P?Em>s`sm=+_?Pzk`g{PU
z%Aq|ZE5AVE{aH=UMtgRa8TjXBC#$7r9=_{)xUZ$Wf?2IW`X=^e5_k1IDZUc>wC>#!
z%fuToH9U{ZM~9)r_m9^|JdRrBocJ4!`q^94A+I+30tiqmr?tANDQ$gX8!g9@>X4n#
z%2Mh)=&YyuC}oLTwV>7ulJO)nGsc=J7Z1F3-f-2FpCbuJq0%hGEqWhFaihkKZ(Pqe
zE(P`LL7urcwBCC$o-Drl(T2CDW%<Ugd@BVnf4a&an=ITzHx72?Kz9}cCx*_U;l7g4
zSwsSrTeYlI#^W1T6>;fpP`u&A%e9#H(P^}F8a*mRON9|qEn4a^nYEF7BWgz-aGOIY
z<>W6rRnMVdzUWml^NnD<rbHws7ZS#1b<GoLgD=VK%vmowFs}R|TAt$1j59~BTN1Qx
zQJN3?>K#obkA9N}oiTz}jPmnD=nBys=t=ZnwPInb+u4L|bbH30?U=ftQcl=F39T$r
zNc>mQP$P$p{y`~9)Yl*Eo6#GaC$?dpu>!L(%ZL#yX`c#-BnABO7+S$&<}a&WenRF?
z1$I%P<)GdQ<RQEvEAPd|+W84-u<Wu(8w{@Op6E;vnCErlK-XfCJ|C~alh=jtq&7^^
z*g}y4k>io!%x)hNA+M}kpptmyfPJphET$rl%VsEpi9<z{U0|Eai&lJBkgPwRtQS6|
zlQ{I8rz#RB={b5{`yjr;G2BT}+&z}L>#CirQSV0n)=QAsQ&o*oGvvjT85{zPzn`Ev
ze_7Imf22GYnK{uT2{UH209uuH_e)($d4MwwH31#2g!M}!VWBKt8Vckgz3C*PIrJIJ
z<wWp1<3R{8gK-sifb5@=8ZvMy$c?NK^*y{7jsRcWeoS?A9q5VmYQH<h)=di?f>2TJ
zAwp?!0Aj|VYASmt9H(Ac%*_N{W@o+dAEx<*;#zVf*LkH+=$<wp&&8XrdXn_qF?P<B
z!R!hWCNt)2Iix+QLI$ieqZaXi6tL+%d@F~|{zHLd5EWSpPHv|IwWL;Dg(HsY{!NH?
z)GCyawXZW-J9@No2=AU@N6E@*g&Ow3PXdElz?Hh0ARTparZFhf+7K`=kkPU;f2{uW
zmF^Rm@56D2$@*~D+Qw*6zHvMO0Zw{U8(05$MC;;dNAF~C|2%7`q==PwWdv2D$*O>x
zJm5M2+yt_&Nr0P@4#l0Y!rVpoCc3W~?w7Ile1!d&+?|}BHIz{iF5GVl>1bE_$+NU!
zAx0fjk=?Ne9U)Y=$w+?f9FhQ=Zam+?nQYwd)5%k|BtnU$NV?Pdr+uYZ=rR`i(g<EQ
z%1;xa%S3bfyzT1!EmZkALq#K{k|W!^>3n(mfN#b!p<#EVS5(vfb}qk>W5Z7HID|vB
zUD3vZD`^ALJV_ZEXajq9(*;uYV{|Jk)CP(ES{XZ2*zGgte<l|c!Y=3l``@U?r02Z<
zp<*@*-H(^bGgRNXHV;(d8#$M|6Nesk?MclnYb{U)XwKhPih5#g19xwtLJvFBNfbBT
zly+!)-giFSf&9nCfoQTW_A}BgOKy0MH}~eRM-Qj7_9sGQsRa%VeRTVWA+ikXkX`7*
zwfh)nBDel{@k%3BBHa=TvM!c25+#3eQQw^Nu-_W}HWB~N7O~dc_wmJ}a#fm_f>YYa
zm8J{U^bT_GE87-7A^gX)>whRE|4(cbthW@PY~bXGY!GSW(Ji&N2~;+BtkJ%Jf}Iel
z<QlQ+0NPzU*5YG|0z~=>KGq)^p?m@nFB945uZiaJ`3QRT*k(+%X2cz9=yuc3FzT9v
zC^1dr8r9Tiu7XE-6z0^+Bc7(DOC~JkV*{W{!cs8naHdaAnAGFRfw{O|9d042Y;L*k
zCYYoRcAx|iC^*;_P;GtcIf@c2H@S5qST!n4daAlgG_QH}(3r_Wf6Uc>5<wN<iD|=$
zZy)1Y5!%}@TY%OV<IVKUjf@mB$#OqCt*MR3I^Q+*{`1bH<tlEPSEv3F4h8M|A=MPF
zk<!%9b<}G>;6C<Bwf&!O%mt~w4QJ~!NMt$M&aFdbu{}<w>CDO~JJH~k({^`XAmMX=
zJw1D)N`eMx+7vDj;l-U&eM35$opS&7X;Y%{YvErqZX6YEd#YONy?AgQB6=rQ04RGm
zPW?d}=83ZrA0ouM5m3wwDwU2W;F~yT2OzUsw9EiD$Ei!7%GdI-`=Bdoh25z3644y<
zSCPe)uEIxzTwZPYLPK%|3Dr5CFoEC5MSz=?j-=<clJ9|?b(3P*?97~Oqp5y6>J5Os
zmt73YRxvNzrn3prVW4=osyn6M5P-ladpq?Hm}u;`EPePhgi0gt3S8959)2vD`uubr
zM}8Gcy$QI0Spk_5JxSLt&$(T2k7aH?rg?yX7|A$-cI_M(achfFxFNu)7IEcvFSdc^
z%ZO1GUKnjGcO4tmpi#yk_MZa2xWe^kZ-J7`|AsB(SoDl!3>hB#HuCzobXvPmaDWb`
z4;^JP5AzO4xW&<_f81Q+pkUG;rYpmGmfRoRas@`aadReyWZ&e;M}^{MwIX9w3!m)&
z{N1a(BRq^%gMO^TRKSl4Eduo$LEbWNXd{gMDqsKOL)4;R{k~oFr}ceu;Zr%V1H$`3
z)4SP#ANw@@6=;7h$wfzgA+S!D6<eo#xG|P*^xzxQ)C!3j2dE7awL#Gpo8UejA9q5=
zByHR9_Ae4%0kOW%b2?H+yc@O{h95`&vIg$tF(<lDSG>j})|<`wyf2gK5XbMiBI~Go
zx1YAv76_fxQkN79-|+$v!WXD-l1Wp3xmd9Mo^s_o;rJ{i&E%eaa^I&Y(C?Zg)A;to
z*aEP>g}jk_8ph+{F_X#!gK(Dg&MN%b$?OV8S8ZZOvw!ooFmJHEV;})6&BNi;B7l@3
zE+K`D?;XtS!SM0#gFW<xnY9waU)o0c2{l=RiK}f_EaauYD8^_VBl2k@ph9M`uW&nK
zUuO;JT{Y5#O2(haN7T4fsj%m%YT&x0`+bVXbo6Usr!U<bJO@=p_umlOG*BV_RU;CK
zbfln0G|C?8dY?mYe0Hn_;~Z3D_~Lm=y5BIX_icI!?uD4VASOD3*N=3hJ4T>vn9<ra
zOD4&AzoTUUf$C^7v=seCbs+QyX)_VEbLwg|>h8n|R!U^>J8@{cqVC51BC>y4x}Pwi
zVYSgC0#BPbiZAV1E@n%pOE<Y06E*Fq({-Gg{lDG|(yr(`LvQC{On>2t9#Wtt5Ju1S
ztRg70g6_=CFV#(v7m8bYkUIvyHbsUOaIcOGEK!HC9pB67zU>$~b4R>=^M<$Y7Q?vK
zXsi&FFiB2jc<0T|>lQK=Y4)H|>}0Jv^im%6gMf8^5VvrtV|OaD-Y6E`?!q$tumW+Y
zRM%LaL3gm`qITFmLx2xvXC+qn?IGzOu&FwC&;;jec!V2(uJ~iN#_;<~TzmcPl)%th
za~Qs5bw`#6Y!H)oE(!<7^UfP*`xqKtF9H-RRz++=5M{HrIHs%%WMOEY&C-K!R9Yw;
z*s}&+1_mIK8yDE%W?JL=nOT5Ct&>i(2S~+NJr~#H6)*cTk%SD`wEZ%?UJ9i;?t|3G
z(?pqe&ChM;;=QKZwU|jivK1t5x=vs1HWKQFB5mH_pvu-J?>xZA>PGKBjOX{BhaDJ>
z>|DZkJj^H>EYZ!BsoU`Ty>V-PI_3YLe)&s0klA%u(SP=}rxflexKo|t=}QQap$lGC
zYrK2|Lu9M7>RwOrFA%cygV^?Ho7dL4-@?NbgzUYK)c_us8v0cB-Z3?4<M;Z!G0oPN
z{|@0$L9W&mc)xb~&2}&M!jUdXUD9Y2?|pojoun>m6x?3?+TQ-o!mqb;Pb_#pmP8k2
z5Cqljdtlz=yFS_qm^aDf^u(SHeJy46(dR#UT&m77nto}RUbUK?b>p!9usd-^`bi*V
z5q98J4Et{u=YO>>Wq&+tLWRY}?BZULMg_w}ey6~uCy7SOan0<iG<h0YnhKK-*8#R4
z8>wz9f9b-+zfNDlX?B*S#$i>CuC9EBy^B%!mG52?k?<{#a1B_en|Y)*>}H348j&>4
zd~Mn(#rG;)b$R8HcM9Qfko7Ik<~pzp%sQFr!%<cKEKKoZ>h2C-VMW-G^0-qg=%Xz&
zjB!jZQ?!{M-2(A=GHnZ2dyC#8RDXVI*oVxD@X5>jep4xU=lNJ;b~bG_l$~D6r+IZ4
zjAZU~q$#Kpio3JYy^>p3gPswtiZ107x}-wFWQ~-2Ib_n>C1FX?EAdyf4SY%SPvqN=
zNYPL(pXg~bv{tt9ans7W3~uRkMv`N#r?=n*<_sMEg&V7hX>ui5RvW=mBN-~;L3>3g
zYGT~O(HTyecd@8T#!>WJ-dvS$dY4O3y+b0hJUDsw%JEiq;cFMDo7n0MC5G^&^uZ0s
z5wlZwdqo>vC!4kM+6cx<0?ObwnJJ=!N|A}}BR;~VX;vj?t=GAIBb*p>kqQN)+N1c^
zD(*E2G?-M|yd@Uq#2sD-gT8Q!pwe+pH>(m@V#Ul}L*!47(L~397NJ&%R`I%l!<%iP
zFWrWw$CNO{rs-!BOiB-2$;Od+-BMw)(vYf~NmggKq~krkg<(HUvem7YwXRPqdb_iH
zzCj1bi>cvWf``4K=0QfU*%wNTn*UTj+5*ckQNau4zzUqZ1hUAIo)i@?obStq8vieA
zs>VEGu|^Q;$>DO;a$BR9=Z>aEjw3|RtQzj-EqB#Lj7}R`dcfq?<zOi~t%YRtMtGA<
z7ew5~pN4;v(1=k^ez!*L+QFsHu#UB~$)`k7JwE)jyQ36=qJTFbZN16s5m(K$ic(v^
zbvn0jS|;5SO9oo6NnU-OX<YwPto08br}SNs2KMjUiTIj$ZOwfOjzmUp4Fe_TCl29z
zCdb{D2XzW}X5(q)Z^Q<zUC%|LS^5-d^;K|PK>z|&leTSdE9Mm~?dqk#s9&T*p^~#I
z93dWSJ=5^=h_A_5WYcR#NyfELlDvU)KUHXd?Y0t}I?Wj|Gn`|1cs~u1?y;|F`v<lG
zTe0B6>ww88kLO|C$Uws`h<Js_w)Vz3{ZxxEZt8O~pjR`TKzvC%sOVDz85!Dia0`V%
zqJ=AOzwy}-+iaZ-I5GJx3M2G)=-NHA53-jbQC7|f)nF%HI}1+gGTa?l^k{eE?kHVk
zd}bSH3SGYnn)F@Q;%Z}7p)f6sP+dW(e3Gr4Ql+d@@ycqQ0UvsJe6zB+N&zl8mrpzX
z>%C+>ytZFVaqT<FAnq?UW`7S1Hc5)ZD-G}x?~`Wi(6eIHT4!!Ke#z4alc)bG=x;x|
z8LOUg)O30oKN?o=I=#c=J=;yU+;qB(N)}mo$*avjVf#gAZaeKy<kkE)>RaC(S=Mg@
z2<rx)Q7(7uHStZxCHJohq{vPt3OCvF@V;LLt(Q59ej^Hmp}QL2e~O%M=sSkmuVzvm
zYK66M9{_hUabPlx$xQc*2%11+Rs4sa5Z<UX!B$&0KFbM69K2R#m7d-zjA8f)^s0Cl
z4oqV<s6rPZao%lZ&PDp{ghbAFZ^YaL7;~p!&Z4(tW|2%QP~Nmf*rL^*gUc!s7J1p3
zvDBWxl>xc3+5mf<37EFx_w%uS&=~U>U2;RBi5|;9{1f^9KQ-PAe%Ns_>HQGB0S1Wb
zV{(`6#F@Q~(~a>kE%<dKcO+h&{(80Tio7Gz68>H2c?v(zqWogP{a&opZ;plfCFrit
zrTx~(wEFnxpNR41ZLjun=u3PIT}+-tCgUj`9_S^*;&=meM82g<12dtFgcdBGq=hf@
zl=qjb^l@{f#%`+PPRL0&^Gu!nt>okA`9h2TR_D@@L5oz`)Xgm1O!-Mw#OJO`R&F+T
z%lIJKDii;Qx*;hOMR$x-6TaoG2f?u?a^O?w(Dv!x>p<%b$@*~Pn5lv`&nu-gbJ*ad
zk0XvEL#SUg4Q5vrp3z!(2_FTnK!Cg`Wj~w%+9|T+w!XmGz&Vg7o!%uC?uLk0iGeW7
zRXxXHO<zEOX{AS-yL<OQYhu=*FkR%rQ`(33G<)ckVQyZX!iYzFQ+S1PvCw+m3_?eB
z%QPb3@>=+Oc`XV~=Mt)@(i2<Kuy0nI%0-OTd2Dj+tWO|q(ku5s5rJyDXQ#g0bxIp(
ziNDJsP@>wxwX3T6Bj}$e5&QHDb4+1>w3}{V#3!yvB|Bsc3-eALh(nf+){P=vC5;t>
zQcCK8wlXJS;Lb|8BDwJ#GLKOVvkX5RRl1`|Btyv0b4o|_ye~SyHAPoy72KiMEw^d0
zCT1DP30!0m!zjl*t6~~lsxePgg=bkLxT}~#<dvC$)P_JfafcU0)MzsBkI;<o3gP;q
zE~sdnyWI^nLK%kH5#Ca7<fqKO7Vo+HK)6CqnV-=9e0*wYD7VI|FS{WOJI+X{LZsw`
z;nXTglSI@L?O&?W56^BFRPw^Hz<`vwtcc}=u0~Cyt^1HZmo$Q9{b`OQ2bgl)34PV*
zkUgUuy{*RCsM~^NytyCPr-kztfGONDP<O~_NG#7J3s)HO@{RR79+Rgk#GUlYp%FG*
z-pnW?LbGhfY(_ppFP<jn(+o-J;S5QV$MCHJRW!C?fDA)|O@~_ad}a$6C`I3XN>TXq
z(Ze~aBR84CoN7sjW8+-O^DYck;w1h#2VCg`7Sk2^M%|65{*Q$P+&{4oVg->ENXm)3
z97k(S;2#4}tKEwz_Xd}+2c|Oa&Pnt{?#rR?gox$Dm6_IexO0_x-qy2G4HVaofr2!}
z9#mYV2(0REHk^yf7&tiagM^(SYr<6^p|Xi>p4Xeo_Fq8cG+wk>w}2_DVzxfmLto3^
zl&n9fraYk^CriGB%L?<OOf9`PwL2<t;2dr}HH7%?Gn(L((1zI!wtE2{OM+YZ?TDs)
zykATE9xA+caM8`gsk8Hm=DhiewA|%veF&E>&70f*@QPlQ3u}@xiEElAPb%iEb7HG4
zepP(zDt3^`D_+$rrxkr3-t3D*Nz#MAr3ILf{vVJZKeZ?*Tk~*GqDU81xW!U9$~NEc
z8!2CkGHk9n&Ifa?)AMxW8~^gl#odpqbWi8Z{}%*NUiEe4T))3H`lp`=*}Ag?HkHd|
zQwgIC&m7Y(P<sKHFmaG55vydaZGb}ryz?_xq`uk}lP7|Z6lm=B$V^6?Y3&hf;vqsS
z0QMd>SL#vMK3_d^v&(MFq0wlosl%jIZhVE?gf=%z!BiCzw3tl*9@Q_+y2*P`LrBSr
z)ddadf+6CU#FbQ^zNE-kTReP^ZQidYl&aI1F>5v=Bsxqjp~oV;+VK8!FkX9Nr^mxv
zlxjB}RfIWC$VrEHk0`*f0H#d*z{SL<>Gx6{_do?|#ptN^BGKID$(#visrNwq+#u}d
z7<C%>GIH?RaW{L{7bmyToA9eu%f9Lng}KgXNp#(JA2(yuFNC`NdBe|`tEA^!=68PR
z2c^&v+ClbZmaOm$3nN))iQ-9_TyMdIoRnh?m<G@qR?8!N3y2fJtkleiP28kw^YhYQ
z;igNNGHMbA-&eGQqrt@8)x_XO!cWuh_Dfgd-plr|rwvK-xE^6msrM({e_jMJCvaYi
z0W>N%74gF4jHOg36}PL?Qy5?DNP<BDnKgz&lJxZtSF-e8^O)fOEav|TSl~gN9K?&7
z27eIR^e(v%BEW;%4>~5(R<NA#vf_o8{k3XC&xn_ogm))_f>Db^;jY>vG|ozq2%nbN
zaQWve&eP0S#ox>d2-^dvG3*OgetUMCmxryJDn+vFLh13vOe<~n)&s6O5z0m+%4g@a
zbBY0LlApHbM;146JI(uEzo{%HcWL2&Wvt=Qk5@=y)%N`nbEzpV4FR55Qy$(lG)qq$
ze2FF?X2sNhK^93$FzP%;@{!G}$s}w0++`OKge~xvF7>;n3SIJpGOSw#(6c;gp0+y@
zz&>p;uRVf5DnUqVMD^!MPGbrNDzFgBa@DDldXHO)L|?GC2vWTk*ufLD#xdZn0<N&}
zG*9Zdk6H}>aEQu#LKi1pp!U)w-%3~#TU?c-qwlZ10&p?8{yG~6$>H5c1!5mDTj<Rm
zO%>%7l<M^fyBr;kV=8EA=2Q;q5|)sx-=fCBWov)7FN`qyehaa1{pNpZuBp3pdW~dn
z{j}B-t_gJy#wL3yE}oRf4yOyurM~|-=<ILd3)34B<EQ?f?>PMDZ+nJ^{NMcE#y^lu
zYmWs#|Jmy!#)`{%R&%ee_}Kkdz132pH5gDaOZTxi#wGc}>M`5*Nx<&fosnn$4Nu`b
Ax&QzG

diff --git a/uploads/acb36b8e7c3847aa8ea8abbd228c445f.png b/uploads/acb36b8e7c3847aa8ea8abbd228c445f.png
deleted file mode 100644
index c09ad0c735b57d39877b5e8f4fa856c2a72021e2..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 13316
zcmeHud0bOxzBd-dI<j=etAasj$BMKraVeWDsY^wRfVLe0Spp(D3Q5>^a@-2nR>&wQ
zR3Oo!#FixpVptP2l~f|eh!7wo5o1Uogb<PdSx(M90iCyfd+WTP``)>C=HC91vm|+*
z^ZcIQ_I<v;=bS$f;A{1}RlhScGqc*aclT#zW(${^nJuV#+XDWk(!s$9pB5y2=DX9Z
z_Obmae6#TQ4*wlyX157T4N;5W`z7&vLz2wQtQn@y0w(U(Q8Tk`-|XAH<BRkNIbR+k
z+PiAelkW3zKOQx@uh{wCvYk=km*T39+F9P|S}RN<_6CS>P1MRCzAn`Y*TLO&T!>l#
zpAKx<03Xdh%r!mY;|F!7n_IRkOsD0Hx8UQoBf+MdFD&8Fnw|RU@7ZXoF6tftfs%N4
zd+R*L@Z3qX*mu3n>bddE{9>rVGx*u;j2yke)@OD$J1YmwMxbo7+uHH8$H>`E{jgXy
z8Q~y_5#tr4ykdqDBKQb=(C7#s^r3<=JbGv%@fpR=tcd{26wk|!JV5h+j-($bTCfxB
z)_r8=zAA5#h?K`G_pyDHyC|qDg~|LL3w+T|bdgbhZ#GMWTTM1zCOvl)9KwGOX!5hX
z&7958h-dUGWsEahBTH=TKNN(RnU$JGeQ1NRrQ-#8R+YBoQ7_;!465SW*t|(ANOutH
zX}xfam7DgFJ(Qi*6#ue(ky)J`JoC>hr}7Px-C3Ia47<15BIvxx*-relRi-u<nC2U~
zbWx=7@tG-!?zV)feXqU2%*-_!R#Y}c*V$&Y$esnwRiw#4y5xC|hrN3QUYoAvT3>Nw
z=PfN>@Iy`7N0zzVbP)v}8Oo&Ip=4t&Xn1_)L8yME!ol4RI(hE}Sts67$%_DbP*zJH
zQ@=s6PyD4Wox4+GeTG6PHMcN}ylk4b9&M>kb>Lby16IU(g;Oy8a~~k>-dLcPAXEn`
z+?yOW7oF}H-%^>jt_;d{`PjKun129)mdRxcPKCl2bqcXbSjGj`MowGJu2gJD_ZCoT
zwL@vH@3_-LqwN1B%=p#)^j2kUG4}w}Tw-B~c7V-v5&<7NtVEs*I_a75x{(}ZkD)Q@
zo;G}e#%+e7aCOI<0}j92Ka+!cwAf6PRF2&?Br(j2TVyyRlG+@GGPwM!SoW6L#4%X#
zYEP@T9t#aNEAieNY>m2m<E4;DBSt{VG}|J5zQV#et+_39_=u0aZQfGVaL0@0Jjqpu
znTiWeBaCwi(#>tH9Z$^6@Q+}x2~N=+!yDQceT}2Bg}2y{?&EK)$^@t5w-_#;JL$aH
z+LC5quX+qfcG&IRK&o2x>7xi<#;t@zy8tt@nQi|#F8E*P?Em>s`sm=+_?Pzk`g{PU
z%Aq|ZE5AVE{aH=UMtgRa8TjXBC#$7r9=_{)xUZ$Wf?2IW`X=^e5_k1IDZUc>wC>#!
z%fuToH9U{ZM~9)r_m9^|JdRrBocJ4!`q^94A+I+30tiqmr?tANDQ$gX8!g9@>X4n#
z%2Mh)=&YyuC}oLTwV>7ulJO)nGsc=J7Z1F3-f-2FpCbuJq0%hGEqWhFaihkKZ(Pqe
zE(P`LL7urcwBCC$o-Drl(T2CDW%<Ugd@BVnf4a&an=ITzHx72?Kz9}cCx*_U;l7g4
zSwsSrTeYlI#^W1T6>;fpP`u&A%e9#H(P^}F8a*mRON9|qEn4a^nYEF7BWgz-aGOIY
z<>W6rRnMVdzUWml^NnD<rbHws7ZS#1b<GoLgD=VK%vmowFs}R|TAt$1j59~BTN1Qx
zQJN3?>K#obkA9N}oiTz}jPmnD=nBys=t=ZnwPInb+u4L|bbH30?U=ftQcl=F39T$r
zNc>mQP$P$p{y`~9)Yl*Eo6#GaC$?dpu>!L(%ZL#yX`c#-BnABO7+S$&<}a&WenRF?
z1$I%P<)GdQ<RQEvEAPd|+W84-u<Wu(8w{@Op6E;vnCErlK-XfCJ|C~alh=jtq&7^^
z*g}y4k>io!%x)hNA+M}kpptmyfPJphET$rl%VsEpi9<z{U0|Eai&lJBkgPwRtQS6|
zlQ{I8rz#RB={b5{`yjr;G2BT}+&z}L>#CirQSV0n)=QAsQ&o*oGvvjT85{zPzn`Ev
ze_7Imf22GYnK{uT2{UH209uuH_e)($d4MwwH31#2g!M}!VWBKt8Vckgz3C*PIrJIJ
z<wWp1<3R{8gK-sifb5@=8ZvMy$c?NK^*y{7jsRcWeoS?A9q5VmYQH<h)=di?f>2TJ
zAwp?!0Aj|VYASmt9H(Ac%*_N{W@o+dAEx<*;#zVf*LkH+=$<wp&&8XrdXn_qF?P<B
z!R!hWCNt)2Iix+QLI$ieqZaXi6tL+%d@F~|{zHLd5EWSpPHv|IwWL;Dg(HsY{!NH?
z)GCyawXZW-J9@No2=AU@N6E@*g&Ow3PXdElz?Hh0ARTparZFhf+7K`=kkPU;f2{uW
zmF^Rm@56D2$@*~D+Qw*6zHvMO0Zw{U8(05$MC;;dNAF~C|2%7`q==PwWdv2D$*O>x
zJm5M2+yt_&Nr0P@4#l0Y!rVpoCc3W~?w7Ile1!d&+?|}BHIz{iF5GVl>1bE_$+NU!
zAx0fjk=?Ne9U)Y=$w+?f9FhQ=Zam+?nQYwd)5%k|BtnU$NV?Pdr+uYZ=rR`i(g<EQ
z%1;xa%S3bfyzT1!EmZkALq#K{k|W!^>3n(mfN#b!p<#EVS5(vfb}qk>W5Z7HID|vB
zUD3vZD`^ALJV_ZEXajq9(*;uYV{|Jk)CP(ES{XZ2*zGgte<l|c!Y=3l``@U?r02Z<
zp<*@*-H(^bGgRNXHV;(d8#$M|6Nesk?MclnYb{U)XwKhPih5#g19xwtLJvFBNfbBT
zly+!)-giFSf&9nCfoQTW_A}BgOKy0MH}~eRM-Qj7_9sGQsRa%VeRTVWA+ikXkX`7*
zwfh)nBDel{@k%3BBHa=TvM!c25+#3eQQw^Nu-_W}HWB~N7O~dc_wmJ}a#fm_f>YYa
zm8J{U^bT_GE87-7A^gX)>whRE|4(cbthW@PY~bXGY!GSW(Ji&N2~;+BtkJ%Jf}Iel
z<QlQ+0NPzU*5YG|0z~=>KGq)^p?m@nFB945uZiaJ`3QRT*k(+%X2cz9=yuc3FzT9v
zC^1dr8r9Tiu7XE-6z0^+Bc7(DOC~JkV*{W{!cs8naHdaAnAGFRfw{O|9d042Y;L*k
zCYYoRcAx|iC^*;_P;GtcIf@c2H@S5qST!n4daAlgG_QH}(3r_Wf6Uc>5<wN<iD|=$
zZy)1Y5!%}@TY%OV<IVKUjf@mB$#OqCt*MR3I^Q+*{`1bH<tlEPSEv3F4h8M|A=MPF
zk<!%9b<}G>;6C<Bwf&!O%mt~w4QJ~!NMt$M&aFdbu{}<w>CDO~JJH~k({^`XAmMX=
zJw1D)N`eMx+7vDj;l-U&eM35$opS&7X;Y%{YvErqZX6YEd#YONy?AgQB6=rQ04RGm
zPW?d}=83ZrA0ouM5m3wwDwU2W;F~yT2OzUsw9EiD$Ei!7%GdI-`=Bdoh25z3644y<
zSCPe)uEIxzTwZPYLPK%|3Dr5CFoEC5MSz=?j-=<clJ9|?b(3P*?97~Oqp5y6>J5Os
zmt73YRxvNzrn3prVW4=osyn6M5P-ladpq?Hm}u;`EPePhgi0gt3S8959)2vD`uubr
zM}8Gcy$QI0Spk_5JxSLt&$(T2k7aH?rg?yX7|A$-cI_M(achfFxFNu)7IEcvFSdc^
z%ZO1GUKnjGcO4tmpi#yk_MZa2xWe^kZ-J7`|AsB(SoDl!3>hB#HuCzobXvPmaDWb`
z4;^JP5AzO4xW&<_f81Q+pkUG;rYpmGmfRoRas@`aadReyWZ&e;M}^{MwIX9w3!m)&
z{N1a(BRq^%gMO^TRKSl4Eduo$LEbWNXd{gMDqsKOL)4;R{k~oFr}ceu;Zr%V1H$`3
z)4SP#ANw@@6=;7h$wfzgA+S!D6<eo#xG|P*^xzxQ)C!3j2dE7awL#Gpo8UejA9q5=
zByHR9_Ae4%0kOW%b2?H+yc@O{h95`&vIg$tF(<lDSG>j})|<`wyf2gK5XbMiBI~Go
zx1YAv76_fxQkN79-|+$v!WXD-l1Wp3xmd9Mo^s_o;rJ{i&E%eaa^I&Y(C?Zg)A;to
z*aEP>g}jk_8ph+{F_X#!gK(Dg&MN%b$?OV8S8ZZOvw!ooFmJHEV;})6&BNi;B7l@3
zE+K`D?;XtS!SM0#gFW<xnY9waU)o0c2{l=RiK}f_EaauYD8^_VBl2k@ph9M`uW&nK
zUuO;JT{Y5#O2(haN7T4fsj%m%YT&x0`+bVXbo6Usr!U<bJO@=p_umlOG*BV_RU;CK
zbfln0G|C?8dY?mYe0Hn_;~Z3D_~Lm=y5BIX_icI!?uD4VASOD3*N=3hJ4T>vn9<ra
zOD4&AzoTUUf$C^7v=seCbs+QyX)_VEbLwg|>h8n|R!U^>J8@{cqVC51BC>y4x}Pwi
zVYSgC0#BPbiZAV1E@n%pOE<Y06E*Fq({-Gg{lDG|(yr(`LvQC{On>2t9#Wtt5Ju1S
ztRg70g6_=CFV#(v7m8bYkUIvyHbsUOaIcOGEK!HC9pB67zU>$~b4R>=^M<$Y7Q?vK
zXsi&FFiB2jc<0T|>lQK=Y4)H|>}0Jv^im%6gMf8^5VvrtV|OaD-Y6E`?!q$tumW+Y
zRM%LaL3gm`qITFmLx2xvXC+qn?IGzOu&FwC&;;jec!V2(uJ~iN#_;<~TzmcPl)%th
za~Qs5bw`#6Y!H)oE(!<7^UfP*`xqKtF9H-RRz++=5M{HrIHs%%WMOEY&C-K!R9Yw;
z*s}&+1_mIK8yDE%W?JL=nOT5Ct&>i(2S~+NJr~#H6)*cTk%SD`wEZ%?UJ9i;?t|3G
z(?pqe&ChM;;=QKZwU|jivK1t5x=vs1HWKQFB5mH_pvu-J?>xZA>PGKBjOX{BhaDJ>
z>|DZkJj^H>EYZ!BsoU`Ty>V-PI_3YLe)&s0klA%u(SP=}rxflexKo|t=}QQap$lGC
zYrK2|Lu9M7>RwOrFA%cygV^?Ho7dL4-@?NbgzUYK)c_us8v0cB-Z3?4<M;Z!G0oPN
z{|@0$L9W&mc)xb~&2}&M!jUdXUD9Y2?|pojoun>m6x?3?+TQ-o!mqb;Pb_#pmP8k2
z5Cqljdtlz=yFS_qm^aDf^u(SHeJy46(dR#UT&m77nto}RUbUK?b>p!9usd-^`bi*V
z5q98J4Et{u=YO>>Wq&+tLWRY}?BZULMg_w}ey6~uCy7SOan0<iG<h0YnhKK-*8#R4
z8>wz9f9b-+zfNDlX?B*S#$i>CuC9EBy^B%!mG52?k?<{#a1B_en|Y)*>}H348j&>4
zd~Mn(#rG;)b$R8HcM9Qfko7Ik<~pzp%sQFr!%<cKEKKoZ>h2C-VMW-G^0-qg=%Xz&
zjB!jZQ?!{M-2(A=GHnZ2dyC#8RDXVI*oVxD@X5>jep4xU=lNJ;b~bG_l$~D6r+IZ4
zjAZU~q$#Kpio3JYy^>p3gPswtiZ107x}-wFWQ~-2Ib_n>C1FX?EAdyf4SY%SPvqN=
zNYPL(pXg~bv{tt9ans7W3~uRkMv`N#r?=n*<_sMEg&V7hX>ui5RvW=mBN-~;L3>3g
zYGT~O(HTyecd@8T#!>WJ-dvS$dY4O3y+b0hJUDsw%JEiq;cFMDo7n0MC5G^&^uZ0s
z5wlZwdqo>vC!4kM+6cx<0?ObwnJJ=!N|A}}BR;~VX;vj?t=GAIBb*p>kqQN)+N1c^
zD(*E2G?-M|yd@Uq#2sD-gT8Q!pwe+pH>(m@V#Ul}L*!47(L~397NJ&%R`I%l!<%iP
zFWrWw$CNO{rs-!BOiB-2$;Od+-BMw)(vYf~NmggKq~krkg<(HUvem7YwXRPqdb_iH
zzCj1bi>cvWf``4K=0QfU*%wNTn*UTj+5*ckQNau4zzUqZ1hUAIo)i@?obStq8vieA
zs>VEGu|^Q;$>DO;a$BR9=Z>aEjw3|RtQzj-EqB#Lj7}R`dcfq?<zOi~t%YRtMtGA<
z7ew5~pN4;v(1=k^ez!*L+QFsHu#UB~$)`k7JwE)jyQ36=qJTFbZN16s5m(K$ic(v^
zbvn0jS|;5SO9oo6NnU-OX<YwPto08br}SNs2KMjUiTIj$ZOwfOjzmUp4Fe_TCl29z
zCdb{D2XzW}X5(q)Z^Q<zUC%|LS^5-d^;K|PK>z|&leTSdE9Mm~?dqk#s9&T*p^~#I
z93dWSJ=5^=h_A_5WYcR#NyfELlDvU)KUHXd?Y0t}I?Wj|Gn`|1cs~u1?y;|F`v<lG
zTe0B6>ww88kLO|C$Uws`h<Js_w)Vz3{ZxxEZt8O~pjR`TKzvC%sOVDz85!Dia0`V%
zqJ=AOzwy}-+iaZ-I5GJx3M2G)=-NHA53-jbQC7|f)nF%HI}1+gGTa?l^k{eE?kHVk
zd}bSH3SGYnn)F@Q;%Z}7p)f6sP+dW(e3Gr4Ql+d@@ycqQ0UvsJe6zB+N&zl8mrpzX
z>%C+>ytZFVaqT<FAnq?UW`7S1Hc5)ZD-G}x?~`Wi(6eIHT4!!Ke#z4alc)bG=x;x|
z8LOUg)O30oKN?o=I=#c=J=;yU+;qB(N)}mo$*avjVf#gAZaeKy<kkE)>RaC(S=Mg@
z2<rx)Q7(7uHStZxCHJohq{vPt3OCvF@V;LLt(Q59ej^Hmp}QL2e~O%M=sSkmuVzvm
zYK66M9{_hUabPlx$xQc*2%11+Rs4sa5Z<UX!B$&0KFbM69K2R#m7d-zjA8f)^s0Cl
z4oqV<s6rPZao%lZ&PDp{ghbAFZ^YaL7;~p!&Z4(tW|2%QP~Nmf*rL^*gUc!s7J1p3
zvDBWxl>xc3+5mf<37EFx_w%uS&=~U>U2;RBi5|;9{1f^9KQ-PAe%Ns_>HQGB0S1Wb
zV{(`6#F@Q~(~a>kE%<dKcO+h&{(80Tio7Gz68>H2c?v(zqWogP{a&opZ;plfCFrit
zrTx~(wEFnxpNR41ZLjun=u3PIT}+-tCgUj`9_S^*;&=meM82g<12dtFgcdBGq=hf@
zl=qjb^l@{f#%`+PPRL0&^Gu!nt>okA`9h2TR_D@@L5oz`)Xgm1O!-Mw#OJO`R&F+T
z%lIJKDii;Qx*;hOMR$x-6TaoG2f?u?a^O?w(Dv!x>p<%b$@*~Pn5lv`&nu-gbJ*ad
zk0XvEL#SUg4Q5vrp3z!(2_FTnK!Cg`Wj~w%+9|T+w!XmGz&Vg7o!%uC?uLk0iGeW7
zRXxXHO<zEOX{AS-yL<OQYhu=*FkR%rQ`(33G<)ckVQyZX!iYzFQ+S1PvCw+m3_?eB
z%QPb3@>=+Oc`XV~=Mt)@(i2<Kuy0nI%0-OTd2Dj+tWO|q(ku5s5rJyDXQ#g0bxIp(
ziNDJsP@>wxwX3T6Bj}$e5&QHDb4+1>w3}{V#3!yvB|Bsc3-eALh(nf+){P=vC5;t>
zQcCK8wlXJS;Lb|8BDwJ#GLKOVvkX5RRl1`|Btyv0b4o|_ye~SyHAPoy72KiMEw^d0
zCT1DP30!0m!zjl*t6~~lsxePgg=bkLxT}~#<dvC$)P_JfafcU0)MzsBkI;<o3gP;q
zE~sdnyWI^nLK%kH5#Ca7<fqKO7Vo+HK)6CqnV-=9e0*wYD7VI|FS{WOJI+X{LZsw`
z;nXTglSI@L?O&?W56^BFRPw^Hz<`vwtcc}=u0~Cyt^1HZmo$Q9{b`OQ2bgl)34PV*
zkUgUuy{*RCsM~^NytyCPr-kztfGONDP<O~_NG#7J3s)HO@{RR79+Rgk#GUlYp%FG*
z-pnW?LbGhfY(_ppFP<jn(+o-J;S5QV$MCHJRW!C?fDA)|O@~_ad}a$6C`I3XN>TXq
z(Ze~aBR84CoN7sjW8+-O^DYck;w1h#2VCg`7Sk2^M%|65{*Q$P+&{4oVg->ENXm)3
z97k(S;2#4}tKEwz_Xd}+2c|Oa&Pnt{?#rR?gox$Dm6_IexO0_x-qy2G4HVaofr2!}
z9#mYV2(0REHk^yf7&tiagM^(SYr<6^p|Xi>p4Xeo_Fq8cG+wk>w}2_DVzxfmLto3^
zl&n9fraYk^CriGB%L?<OOf9`PwL2<t;2dr}HH7%?Gn(L((1zI!wtE2{OM+YZ?TDs)
zykATE9xA+caM8`gsk8Hm=DhiewA|%veF&E>&70f*@QPlQ3u}@xiEElAPb%iEb7HG4
zepP(zDt3^`D_+$rrxkr3-t3D*Nz#MAr3ILf{vVJZKeZ?*Tk~*GqDU81xW!U9$~NEc
z8!2CkGHk9n&Ifa?)AMxW8~^gl#odpqbWi8Z{}%*NUiEe4T))3H`lp`=*}Ag?HkHd|
zQwgIC&m7Y(P<sKHFmaG55vydaZGb}ryz?_xq`uk}lP7|Z6lm=B$V^6?Y3&hf;vqsS
z0QMd>SL#vMK3_d^v&(MFq0wlosl%jIZhVE?gf=%z!BiCzw3tl*9@Q_+y2*P`LrBSr
z)ddadf+6CU#FbQ^zNE-kTReP^ZQidYl&aI1F>5v=Bsxqjp~oV;+VK8!FkX9Nr^mxv
zlxjB}RfIWC$VrEHk0`*f0H#d*z{SL<>Gx6{_do?|#ptN^BGKID$(#visrNwq+#u}d
z7<C%>GIH?RaW{L{7bmyToA9eu%f9Lng}KgXNp#(JA2(yuFNC`NdBe|`tEA^!=68PR
z2c^&v+ClbZmaOm$3nN))iQ-9_TyMdIoRnh?m<G@qR?8!N3y2fJtkleiP28kw^YhYQ
z;igNNGHMbA-&eGQqrt@8)x_XO!cWuh_Dfgd-plr|rwvK-xE^6msrM({e_jMJCvaYi
z0W>N%74gF4jHOg36}PL?Qy5?DNP<BDnKgz&lJxZtSF-e8^O)fOEav|TSl~gN9K?&7
z27eIR^e(v%BEW;%4>~5(R<NA#vf_o8{k3XC&xn_ogm))_f>Db^;jY>vG|ozq2%nbN
zaQWve&eP0S#ox>d2-^dvG3*OgetUMCmxryJDn+vFLh13vOe<~n)&s6O5z0m+%4g@a
zbBY0LlApHbM;146JI(uEzo{%HcWL2&Wvt=Qk5@=y)%N`nbEzpV4FR55Qy$(lG)qq$
ze2FF?X2sNhK^93$FzP%;@{!G}$s}w0++`OKge~xvF7>;n3SIJpGOSw#(6c;gp0+y@
zz&>p;uRVf5DnUqVMD^!MPGbrNDzFgBa@DDldXHO)L|?GC2vWTk*ufLD#xdZn0<N&}
zG*9Zdk6H}>aEQu#LKi1pp!U)w-%3~#TU?c-qwlZ10&p?8{yG~6$>H5c1!5mDTj<Rm
zO%>%7l<M^fyBr;kV=8EA=2Q;q5|)sx-=fCBWov)7FN`qyehaa1{pNpZuBp3pdW~dn
z{j}B-t_gJy#wL3yE}oRf4yOyurM~|-=<ILd3)34B<EQ?f?>PMDZ+nJ^{NMcE#y^lu
zYmWs#|Jmy!#)`{%R&%ee_}Kkdz132pH5gDaOZTxi#wGc}>M`5*Nx<&fosnn$4Nu`b
Ax&QzG


From 528ba503188e8a601257dfe4a5e035de58d02789 Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Fri, 10 Apr 2026 00:22:20 +0800
Subject: [PATCH 09/12] feat: integrate Flyway baseline config; refactor admin
 checks to role; add content-type for image responses; add LocalUploadService
 tests

---
 pom.xml                                       |   5 +
 .../blog/controller/ArticleController.java    |  12 +-
 .../java/com/example/blog/entity/User.java    |   4 +
 .../example/blog/service/UploadService.java   |   2 +
 .../blog/service/impl/LocalUploadService.java |  14 +++
 src/main/resources/application-dev.yml        |   9 +-
 src/main/resources/application-prod.yml       |   5 +
 .../db/migration/V2__set_admin_role.sql       |   7 ++
 .../service/impl/LocalUploadServiceTest.java  | 114 ++++++++++++++++++
 9 files changed, 166 insertions(+), 6 deletions(-)
 create mode 100644 src/main/resources/db/migration/V2__set_admin_role.sql
 create mode 100644 src/test/java/com/example/blog/service/impl/LocalUploadServiceTest.java

diff --git a/pom.xml b/pom.xml
index 99bb51c..dbe61e4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -70,6 +70,11 @@
       <artifactId>spring-boot-starter-mail</artifactId>
     </dependency>
 
+    <dependency>
+      <groupId>org.flywaydb</groupId>
+      <artifactId>flyway-core</artifactId>
+    </dependency>
+
     <dependency>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-test</artifactId>
diff --git a/src/main/java/com/example/blog/controller/ArticleController.java b/src/main/java/com/example/blog/controller/ArticleController.java
index 636ff39..08a2b1e 100644
--- a/src/main/java/com/example/blog/controller/ArticleController.java
+++ b/src/main/java/com/example/blog/controller/ArticleController.java
@@ -147,7 +147,7 @@ public String likeComment(@PathVariable String slug, @PathVariable Long id) {
   @GetMapping("/editor/new")
   public String createForm(Model model) {
     com.example.blog.entity.User currentUser = userService.getCurrentUserOrThrow();
-    if (!"admin".equals(currentUser.getUsername())) {
+    if (!currentUser.isAdmin()) {
       return "redirect:/?error=no_permission";
     }
     java.util.List<Article> drafts = articleService.listDrafts(currentUser.getId());
@@ -163,7 +163,7 @@ public String createForm(Model model) {
   @GetMapping("/editor/{id}")
   public String editForm(@PathVariable Long id, Model model) {
     com.example.blog.entity.User currentUser = userService.getCurrentUserOrThrow();
-    if (!"admin".equals(currentUser.getUsername())) {
+    if (!currentUser.isAdmin()) {
       return "redirect:/?error=no_permission";
     }
     Article a = articleService.getById(id);
@@ -192,7 +192,7 @@ public String create(@ModelAttribute("form") @Valid ArticleForm form,
                        @RequestParam(required = false) Long id,
                        Model model) {
     com.example.blog.entity.User currentUser = userService.getCurrentUserOrThrow();
-    if (!"admin".equals(currentUser.getUsername())) {
+    if (!currentUser.isAdmin()) {
       return "redirect:/?error=no_permission";
     }
     if (br.hasErrors()) {
@@ -212,7 +212,7 @@ public String delete(@PathVariable Long id) {
   @PostMapping("/upload-image")
   public ResponseEntity<?> uploadImage(@RequestParam("file") MultipartFile file) throws java.io.IOException {
     com.example.blog.entity.User currentUser = userService.getCurrentUserOrThrow();
-    if (!"admin".equals(currentUser.getUsername())) {
+    if (!currentUser.isAdmin()) {
       return ResponseEntity.status(403).body(Map.of("error", "no_permission"));
     }
     try {
@@ -229,6 +229,8 @@ public ResponseEntity<Resource> getImage(@PathVariable String filename) throws j
     if (resource == null) {
       return ResponseEntity.notFound().build();
     }
-    return ResponseEntity.ok(resource);
+    return ResponseEntity.ok()
+      .contentType(uploadService.getMediaType(filename))
+      .body(resource);
   }
 }
diff --git a/src/main/java/com/example/blog/entity/User.java b/src/main/java/com/example/blog/entity/User.java
index 22275d1..6c2cbcb 100644
--- a/src/main/java/com/example/blog/entity/User.java
+++ b/src/main/java/com/example/blog/entity/User.java
@@ -55,4 +55,8 @@ public void prePersist() {
     if (createdAt == null) createdAt = Instant.now();
     if (role == null) role = Role.ROLE_USER;
   }
+
+  public boolean isAdmin() {
+    return this.role == Role.ROLE_ADMIN;
+  }
 }
diff --git a/src/main/java/com/example/blog/service/UploadService.java b/src/main/java/com/example/blog/service/UploadService.java
index c6878e4..03062bf 100644
--- a/src/main/java/com/example/blog/service/UploadService.java
+++ b/src/main/java/com/example/blog/service/UploadService.java
@@ -1,9 +1,11 @@
 package com.example.blog.service;
 
 import org.springframework.core.io.Resource;
+import org.springframework.http.MediaType;
 import org.springframework.web.multipart.MultipartFile;
 
 public interface UploadService {
   String storeImage(MultipartFile file) throws java.io.IOException;
   Resource loadImage(String filename) throws java.io.IOException;
+  MediaType getMediaType(String filename);
 }
diff --git a/src/main/java/com/example/blog/service/impl/LocalUploadService.java b/src/main/java/com/example/blog/service/impl/LocalUploadService.java
index 0b3539d..d1c909f 100644
--- a/src/main/java/com/example/blog/service/impl/LocalUploadService.java
+++ b/src/main/java/com/example/blog/service/impl/LocalUploadService.java
@@ -4,6 +4,7 @@
 import com.example.blog.service.UploadService;
 import org.springframework.core.io.FileSystemResource;
 import org.springframework.core.io.Resource;
+import org.springframework.http.MediaType;
 import org.springframework.stereotype.Service;
 import org.springframework.util.StringUtils;
 import org.springframework.web.multipart.MultipartFile;
@@ -63,4 +64,17 @@ public Resource loadImage(String filename) throws IOException {
     }
     return new FileSystemResource(file.toFile());
   }
+
+  @Override
+  public MediaType getMediaType(String filename) {
+    if (filename == null) {
+      return MediaType.APPLICATION_OCTET_STREAM;
+    }
+    String lower = filename.toLowerCase();
+    if (lower.endsWith(".png")) return MediaType.IMAGE_PNG;
+    if (lower.endsWith(".jpg") || lower.endsWith(".jpeg")) return MediaType.IMAGE_JPEG;
+    if (lower.endsWith(".gif")) return MediaType.IMAGE_GIF;
+    if (lower.endsWith(".webp")) return MediaType.parseMediaType("image/webp");
+    return MediaType.APPLICATION_OCTET_STREAM;
+  }
 }
diff --git a/src/main/resources/application-dev.yml b/src/main/resources/application-dev.yml
index 78b04dd..61796d1 100644
--- a/src/main/resources/application-dev.yml
+++ b/src/main/resources/application-dev.yml
@@ -11,7 +11,7 @@ spring:
     driver-class-name: com.mysql.cj.jdbc.Driver
   jpa:
     hibernate:
-      ddl-auto: update
+      ddl-auto: validate
     show-sql: true
   thymeleaf:
     cache: false
@@ -32,3 +32,10 @@ spring:
 logging:
   level:
     org.thymeleaf: DEBUG
+
+spring:
+  flyway:
+    enabled: true
+    baseline-on-migrate: true
+    baseline-version: 1
+    locations: classpath:db/migration
diff --git a/src/main/resources/application-prod.yml b/src/main/resources/application-prod.yml
index d714fef..f324421 100644
--- a/src/main/resources/application-prod.yml
+++ b/src/main/resources/application-prod.yml
@@ -8,6 +8,11 @@ spring:
     url: ${SPRING_DATASOURCE_URL}
     username: ${SPRING_DATASOURCE_USERNAME}
     password: ${SPRING_DATASOURCE_PASSWORD}
+  flyway:
+    enabled: true
+    baseline-on-migrate: true
+    baseline-version: 1
+    locations: classpath:db/migration
   jpa:
     hibernate:
       ddl-auto: validate
diff --git a/src/main/resources/db/migration/V2__set_admin_role.sql b/src/main/resources/db/migration/V2__set_admin_role.sql
new file mode 100644
index 0000000..d4148a7
--- /dev/null
+++ b/src/main/resources/db/migration/V2__set_admin_role.sql
@@ -0,0 +1,7 @@
+UPDATE users
+SET role = 'ROLE_ADMIN'
+WHERE username = 'admin' AND (role IS NULL OR role = 'ROLE_USER');
+
+UPDATE users
+SET role = 'ROLE_USER'
+WHERE role IS NULL;
diff --git a/src/test/java/com/example/blog/service/impl/LocalUploadServiceTest.java b/src/test/java/com/example/blog/service/impl/LocalUploadServiceTest.java
new file mode 100644
index 0000000..ea63d16
--- /dev/null
+++ b/src/test/java/com/example/blog/service/impl/LocalUploadServiceTest.java
@@ -0,0 +1,114 @@
+package com.example.blog.service.impl;
+
+import com.example.blog.config.UploadProperties;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.io.TempDir;
+import org.springframework.core.io.Resource;
+import org.springframework.mock.web.MockMultipartFile;
+
+import java.nio.file.Path;
+import java.util.List;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+class LocalUploadServiceTest {
+
+  @TempDir
+  Path tempDir;
+
+  private LocalUploadService uploadService;
+
+  @BeforeEach
+  void setUp() {
+    UploadProperties props = new UploadProperties();
+    props.setDir(tempDir.toString());
+    props.setMaxSize(5 * 1024 * 1024);
+    props.setAllowedExtensions(List.of(".jpg", ".jpeg", ".png", ".gif", ".webp"));
+    props.setAllowedContentTypes(List.of("image/jpeg", "image/png", "image/gif", "image/webp"));
+    uploadService = new LocalUploadService(props);
+  }
+
+  @Test
+  void storeImage_shouldSavePng() throws Exception {
+    MockMultipartFile file = new MockMultipartFile(
+        "file",
+        "test.png",
+        "image/png",
+        "fake-image".getBytes()
+    );
+    String filename = uploadService.storeImage(file);
+    assertNotNull(filename);
+    assertTrue(filename.endsWith(".png"));
+    Resource resource = uploadService.loadImage(filename);
+    assertNotNull(resource);
+    assertTrue(resource.exists());
+  }
+
+  @Test
+  void storeImage_shouldRejectEmptyFile() {
+    MockMultipartFile file = new MockMultipartFile(
+        "file",
+        "empty.png",
+        "image/png",
+        new byte[0]
+    );
+    IllegalArgumentException ex = assertThrows(
+        IllegalArgumentException.class,
+        () -> uploadService.storeImage(file)
+    );
+    assertEquals("empty_file", ex.getMessage());
+  }
+
+  @Test
+  void storeImage_shouldRejectInvalidExtension() {
+    MockMultipartFile file = new MockMultipartFile(
+        "file",
+        "evil.exe",
+        "image/png",
+        "abc".getBytes()
+    );
+    IllegalArgumentException ex = assertThrows(
+        IllegalArgumentException.class,
+        () -> uploadService.storeImage(file)
+    );
+    assertEquals("invalid_extension", ex.getMessage());
+  }
+
+  @Test
+  void storeImage_shouldRejectInvalidContentType() {
+    MockMultipartFile file = new MockMultipartFile(
+        "file",
+        "test.png",
+        "application/octet-stream",
+        "abc".getBytes()
+    );
+    IllegalArgumentException ex = assertThrows(
+        IllegalArgumentException.class,
+        () -> uploadService.storeImage(file)
+    );
+    assertEquals("invalid_content_type", ex.getMessage());
+  }
+
+  @Test
+  void storeImage_shouldRejectTooLargeFile() {
+    byte[] content = new byte[6 * 1024 * 1024];
+    MockMultipartFile file = new MockMultipartFile(
+        "file",
+        "big.png",
+        "image/png",
+        content
+    );
+    IllegalArgumentException ex = assertThrows(
+        IllegalArgumentException.class,
+        () -> uploadService.storeImage(file)
+    );
+    assertEquals("file_too_large", ex.getMessage());
+  }
+
+  @Test
+  void loadImage_shouldReturnNullWhenMissing() throws Exception {
+    Resource resource = uploadService.loadImage("not-exists.png");
+    assertNull(resource);
+  }
+}

From a7d6d6676e7cab141b877ca28f14329b5e1aee7a Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Fri, 10 Apr 2026 00:28:40 +0800
Subject: [PATCH 10/12] chore(dev): adjust Flyway/JPA dev profile settings

---
 src/main/resources/application-dev.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/main/resources/application-dev.yml b/src/main/resources/application-dev.yml
index 61796d1..1fe80f6 100644
--- a/src/main/resources/application-dev.yml
+++ b/src/main/resources/application-dev.yml
@@ -33,7 +33,6 @@ logging:
   level:
     org.thymeleaf: DEBUG
 
-spring:
   flyway:
     enabled: true
     baseline-on-migrate: true

From 717d45fc0ddb81153b01ea00f5f2ef17b02cf97f Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Fri, 10 Apr 2026 00:39:33 +0800
Subject: [PATCH 11/12] docs: align README with profiles+Flyway+upload service;
 ci: add GitHub Actions for test & package

---
 .github/workflows/ci.yml | 24 ++++++++++++++
 README.md                | 69 ++++++++++++++++++++++++++--------------
 2 files changed, 69 insertions(+), 24 deletions(-)
 create mode 100644 .github/workflows/ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..78da581
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,24 @@
+name: CI
+
+on:
+  push:
+    branches: [ "**" ]
+  pull_request:
+    branches: [ "**" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '17'
+          cache: maven
+      - name: Run tests
+        run: mvn -B -ntp test
+      - name: Package
+        run: mvn -B -ntp -DskipTests package
diff --git a/README.md b/README.md
index ba3e3fc..a06a44c 100644
--- a/README.md
+++ b/README.md
@@ -50,10 +50,9 @@ CREATE DATABASE blog_db CHARACTER SET utf8mb4;
 ```
 
 2) 配置数据库与基础参数  
-编辑 `src/main/resources/application.yml`，设置：
-- spring.datasource.url/username/password
-- JPA 配置（已默认 ddl-auto: update）
-- Thymeleaf 与日志级别等
+- 公共配置：`src/main/resources/application.yml`（端口、Multipart、日志、上传白名单等）
+- 开发环境：`src/main/resources/application-dev.yml`（本地 MySQL、JPA validate、Flyway）
+- 生产环境：`src/main/resources/application-prod.yml`（从环境变量读取数据源与邮件，JPA validate、Flyway）
 
 3) 配置邮件（用于邮箱验证码）
 - 支持环境变量（推荐）或直接在 yml 中配置：
@@ -82,7 +81,12 @@ spring:
 
 4) 启动
 ```bash
-mvn spring-boot:run
+# 开发（dev）
+mvn spring-boot:run -Dspring-boot.run.profiles=dev
+
+# 生产（prod）
+# 需注入 SPRING_DATASOURCE_URL/USERNAME/PASSWORD 等环境变量
+SPRING_PROFILES_ACTIVE=prod java -jar target/blog-*.jar
 ```
 
 访问地址：
@@ -147,7 +151,8 @@ mvn spring-boot:run
 - 登录记录 LoginRecord：user（可空）、time、ip、ua、success
 - 操作日志 ActionLog：user、time、action、detail
 
-> JPA 配置为 `ddl-auto: update`，开发期会自动迁移建表，生产环境请改为 `validate` 并显式维护迁移脚本（Flyway/Liquibase）。
+> 数据库迁移
+> 本分支已接入 Flyway，JPA 配置为 `ddl-auto: validate`。首次在已有库上运行时通过 `baseline-on-migrate: true` 做基线，后续按 `db/migration` 版本化迁移。
 
 ## 登录记录与操作日志实现说明
 - Spring Security
@@ -157,9 +162,23 @@ mvn spring-boot:run
 - 个人中心页面仅展示最近 20 条（可按需分页拓展）
 
 ## 图片上传与正文渲染
+- 控制器仅负责鉴权与调用服务：`UploadService.storeImage/loadImage`
+- 服务实现包含：目录创建、大小限制、MIME/扩展名白名单校验、防路径穿越、随机文件名、类型识别返回 `Content-Type`
 - 编辑页支持本地图片上传后自动在正文插入 `<img>`，详情页按 HTML 渲染
 - 请确保存储位置与访问接口已在控制器中放行或加鉴权
 
+## 测试
+- 服务层：`LocalUploadServiceTest`
+  - 覆盖：正常上传、空文件、非法扩展名、非法 MIME、超大文件、缺失文件读取
+- 启动验证：`SmokeTest`（加载应用上下文）
+- 运行：
+  - `mvn test`
+
+## CI（GitHub Actions）
+- 默认工作流：Java 17 + Maven
+  - 执行 `mvn -B -ntp test` 与 `mvn -B -ntp -DskipTests package`
+  - 可在 Pull Request 中自动验证构建与测试
+
 ## 搜索与筛选/排序组合
 - 搜索支持标题/正文/标签名模糊匹配
 - 排序（最新/最热/阅读最多）可与分类、标签、搜索自由组合，所有链接均保留当前组合条件
@@ -193,26 +212,28 @@ src/
 ```
 
 ## 配置与环境变量
-- 基础数据库：`spring.datasource.url` / `username` / `password`
-- JPA：`spring.jpa.hibernate.ddl-auto`（开发期 `update`，生产建议 `validate`）
-- 邮件：`spring.mail.*`（见上文“配置邮件”）
-- 可选环境变量（示例）：
-  - `MAIL_HOST`、`MAIL_PORT`、`MAIL_USERNAME`、`MAIL_PASSWORD`、`MAIL_PROTOCOL`
-  - `APP_BASE_URL`（用于生成邮件中的链接，可按需扩展）
+- Profiles
+  - `application.yml`：公共配置（含 `spring.profiles.active: dev`）
+  - `application-dev.yml`：本地数据库/邮件、`ddl-auto: validate`、`flyway.enabled: true`
+  - `application-prod.yml`：从环境变量读取数据库/邮件、`ddl-auto: validate`、`flyway.enabled: true`
+- 数据库（生产建议用环境变量）
+  - `SPRING_DATASOURCE_URL` / `SPRING_DATASOURCE_USERNAME` / `SPRING_DATASOURCE_PASSWORD`
+- 邮件：`MAIL_HOST` / `MAIL_PORT` / `MAIL_USERNAME` / `MAIL_PASSWORD` / `MAIL_PROTOCOL`
+- 上传目录：`APP_UPLOAD_DIR`（默认 `${user.dir}/uploads`）
 
 ## 构建与运行
-- 开发运行：
-  ```
-  mvn spring-boot:run
-  ```
-- 打包可执行 Jar：
-  ```
-  mvn -DskipTests package
-  java -jar target/blog-*.jar
-  ```
-- 常见 JVM 参数（按需选择）：
-  - `-Xms512m -Xmx512m` 固定堆内存
-  - `-Dserver.port=8080` 修改端口
+- 构建：
+  - `mvn clean package`
+- 开发：
+  - `mvn spring-boot:run -Dspring-boot.run.profiles=dev`
+- 生产：
+  - `SPRING_PROFILES_ACTIVE=prod` 并注入数据源/邮件环境变量后运行 Jar
+  - 常用 JVM 参数：`-Xms512m -Xmx512m`、`-Dserver.port=8080`
+
+## 数据库迁移（Flyway）
+- 现有数据库首次接入：已启用 `baseline-on-migrate: true`，基线版本 `1`
+- 自定义迁移：在 `src/main/resources/db/migration/` 新增 `V{N}__{desc}.sql`
+- 示例：`V2__set_admin_role.sql`（将 admin 设为 `ROLE_ADMIN`、其余空角色补为 `ROLE_USER`）
 
 ## 生产部署示例
 - 反向代理（Nginx）：

From e2f40b778a22725ae68fd7b1527d46a5c860296d Mon Sep 17 00:00:00 2001
From: YIMO691 <2054469475@qq.com>
Date: Fri, 10 Apr 2026 00:57:00 +0800
Subject: [PATCH 12/12] test(ci): use test profile with H2; tighten admin
 endpoints; add controller guard on delete

---
 .github/workflows/ci.yml                      |  4 +++
 pom.xml                                       |  6 ++++
 .../example/blog/config/SecurityConfig.java   |  7 +++--
 .../blog/controller/ArticleController.java    |  4 +++
 src/test/java/com/example/blog/SmokeTest.java |  2 ++
 src/test/resources/application-test.yml       | 31 +++++++++++++++++++
 6 files changed, 52 insertions(+), 2 deletions(-)
 create mode 100644 src/test/resources/application-test.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 78da581..b222778 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,6 +19,10 @@ jobs:
           java-version: '17'
           cache: maven
       - name: Run tests
+        env:
+          SPRING_PROFILES_ACTIVE: test
         run: mvn -B -ntp test
       - name: Package
+        env:
+          SPRING_PROFILES_ACTIVE: test
         run: mvn -B -ntp -DskipTests package
diff --git a/pom.xml b/pom.xml
index dbe61e4..fc368d5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -75,6 +75,12 @@
       <artifactId>flyway-core</artifactId>
     </dependency>
 
+    <dependency>
+      <groupId>com.h2database</groupId>
+      <artifactId>h2</artifactId>
+      <scope>test</scope>
+    </dependency>
+
     <dependency>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-test</artifactId>
diff --git a/src/main/java/com/example/blog/config/SecurityConfig.java b/src/main/java/com/example/blog/config/SecurityConfig.java
index 8525d64..6e96773 100644
--- a/src/main/java/com/example/blog/config/SecurityConfig.java
+++ b/src/main/java/com/example/blog/config/SecurityConfig.java
@@ -4,6 +4,7 @@
 import lombok.RequiredArgsConstructor;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
 import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
 import org.springframework.security.config.Customizer;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
@@ -27,13 +28,15 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
         .csrf(Customizer.withDefaults())
             .authorizeHttpRequests(auth -> auth
                     .requestMatchers(
-                            "/", "/articles", "/articles/search", "/articles/{slug}", "/articles/{slug}/comments", "/auth/**",
+                            "/", "/articles", "/articles/search", "/articles/{slug}", "/articles/{slug}/comments", "/articles/image/**",
+                            "/auth/**",
                             "/error", "/error/**",
                             "/favicon.ico",
                             "/css/**", "/js/**", "/images/**",
                             "/actuator/health", "/actuator/health/**"
                     ).permitAll()
-                    .requestMatchers("/articles/editor/**", "/articles/editor").authenticated()
+                    .requestMatchers("/articles/editor/**", "/articles/editor").hasRole("ADMIN")
+                    .requestMatchers(HttpMethod.POST, "/articles/upload-image", "/articles/*/delete").hasRole("ADMIN")
                     .requestMatchers("/admin/**", "/actuator/**").hasRole("ADMIN")
                     .anyRequest().authenticated()
             )
diff --git a/src/main/java/com/example/blog/controller/ArticleController.java b/src/main/java/com/example/blog/controller/ArticleController.java
index 08a2b1e..d254abd 100644
--- a/src/main/java/com/example/blog/controller/ArticleController.java
+++ b/src/main/java/com/example/blog/controller/ArticleController.java
@@ -205,6 +205,10 @@ public String create(@ModelAttribute("form") @Valid ArticleForm form,
 
   @PostMapping("/{id}/delete")
   public String delete(@PathVariable Long id) {
+    com.example.blog.entity.User currentUser = userService.getCurrentUserOrThrow();
+    if (!currentUser.isAdmin()) {
+      return "redirect:/?error=no_permission";
+    }
     articleService.delete(id);
     return "redirect:/";
   }
diff --git a/src/test/java/com/example/blog/SmokeTest.java b/src/test/java/com/example/blog/SmokeTest.java
index d7cb84c..c5bedea 100644
--- a/src/test/java/com/example/blog/SmokeTest.java
+++ b/src/test/java/com/example/blog/SmokeTest.java
@@ -2,8 +2,10 @@
 
 import org.junit.jupiter.api.Test;
 import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.test.context.ActiveProfiles;
 
 @SpringBootTest
+@ActiveProfiles("test")
 class SmokeTest {
   @Test void contextLoads() {}
 }
diff --git a/src/test/resources/application-test.yml b/src/test/resources/application-test.yml
new file mode 100644
index 0000000..f1d1f46
--- /dev/null
+++ b/src/test/resources/application-test.yml
@@ -0,0 +1,31 @@
+spring:
+  datasource:
+    url: jdbc:h2:mem:blogtest;MODE=MySQL;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE
+    driver-class-name: org.h2.Driver
+    username: sa
+    password:
+
+  jpa:
+    hibernate:
+      ddl-auto: create-drop
+    show-sql: false
+    properties:
+      hibernate:
+        format_sql: false
+
+  flyway:
+    enabled: false
+
+  thymeleaf:
+    cache: false
+
+  mail:
+    host: localhost
+    port: 2525
+    username: test
+    password: test
+
+logging:
+  level:
+    org.springframework: WARN
+    org.hibernate: WARN