Add NAS file manager integration and all pending platform changes

- Installed p7h/nas-file-manager package via private VCS repo
- Published config/nas-file-manager.php with super_admin middleware restriction
- Added NAS env vars to .env.example
- Created admin/nas-storage page with connection info panel and file browser widget
- Added NAS Storage link to admin sidebar (super_admin only)
- Added SuperAdminController@nasStorage method and admin.nas-storage route
- Includes all accumulated branch changes: profile wall, 2FA, audit logs,
  settings panel, country/phone/timezone components, posts, slideshow,
  playlist shares, video downloads/shares, comment likes, notifications,
  social links, and more

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

app/Http/Controllers/Auth/AuthenticatedSessionController.php

@@ -3,6 +3,7 @@
 namespace App\Http\Controllers\Auth;
 
 use App\Http\Controllers\Controller;
+use App\Models\AuditLog;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
 
@@ -23,10 +24,32 @@ class AuthenticatedSessionController extends Controller
         $remember = $request->filled('remember');
 
         if (Auth::attempt($credentials, $remember)) {
+            $user = Auth::user();
+
+            if ($user->two_factor_enabled && $user->two_factor_secret) {
+                Auth::logout();
+                $request->session()->put('2fa_user_id', $user->id);
+                $request->session()->put('2fa_remember', $remember);
+                return redirect()->route('2fa.challenge');
+            }
+
             $request->session()->regenerate();
+
+            AuditLog::record('user.login', [
+                'user_id'   => $user->id,
+                'user_name' => $user->name,
+                'details'   => ['email' => $user->email],
+            ]);
+
             return redirect()->intended('/videos');
         }
 
+        AuditLog::record('user.login.failed', [
+            'user_id'   => null,
+            'user_name' => null,
+            'details'   => ['email' => $credentials['email']],
+        ]);
+
         return back()->withErrors([
             'email' => 'The provided credentials do not match our records.',
         ]);
@@ -34,6 +57,13 @@ class AuthenticatedSessionController extends Controller
 
     public function destroy(Request $request)
     {
+        $user = Auth::user();
+        if ($user) {
+            AuditLog::record('user.logout', [
+                'user_id'   => $user->id,
+                'user_name' => $user->name,
+            ]);
+        }
         Auth::logout();
         $request->session()->invalidate();
         $request->session()->regenerateToken();

app/Http/Controllers/Auth/RegisteredUserController.php

@@ -4,6 +4,7 @@ namespace App\Http\Controllers\Auth;
 
 use App\Http\Controllers\Controller;
 use App\Models\User;
+use App\Rules\NotDisposableEmail;
 use Illuminate\Auth\Events\Registered;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Hash;
@@ -18,22 +19,34 @@ class RegisteredUserController extends Controller
 
     public function store(Request $request)
     {
+        // Honeypot — bots fill hidden fields; real users never do
+        if ($request->filled('_hp')) {
+            // Silently appear to succeed to confuse the bot
+            return redirect()->route('login');
+        }
+
         $request->validate([
-            'name' => ['required', 'string', 'max:255'],
-            'email' => ['required', 'string', 'email', 'max:255', 'unique:users'],
-            'password' => ['required', 'confirmed', Password::defaults()],
+            'name'        => ['required', 'string', 'max:255'],
+            'email'       => ['required', 'string', 'email', 'max:255', 'unique:users', new NotDisposableEmail],
+            'password'    => ['required', 'confirmed', Password::defaults()],
+            'birthday'    => ['required', 'date', 'before:today'],
+            'gender'      => ['required', 'in:male,female'],
+            'nationality' => ['required', 'string', 'size:2'],
         ]);
 
         $user = User::create([
-            'name' => $request->name,
-            'email' => $request->email,
-            'password' => Hash::make($request->password),
+            'name'        => $request->name,
+            'email'       => $request->email,
+            'password'    => Hash::make($request->password),
+            'birthday'    => $request->birthday,
+            'gender'      => $request->gender,
+            'nationality' => $request->nationality,
         ]);
 
         event(new Registered($user));
 
         auth()->login($user);
 
-        return redirect('/videos');
+        return redirect()->route('verification.notice');
     }
 }