diff --git a/system/boot.php b/system/boot.php
index 2b3a85bb..ad8d454a 100644
--- a/system/boot.php
+++ b/system/boot.php
@@ -128,11 +128,15 @@ try {
         unset($menus, $menu_registered);
         include($sys_render);
     } else {
-        // header 404
-        header("HTTP/1.0 404 Not Found");
-        header("Content-Type: text/html; charset=utf-8");
-        echo "404 Not Found";
-        die();
+        if( empty($_SERVER["HTTP_SEC_FETCH_DEST"]) || $_SERVER["HTTP_SEC_FETCH_DEST"] != 'document' ){
+            // header 404
+            header("HTTP/1.0 404 Not Found");
+            header("Content-Type: text/html; charset=utf-8");
+            echo "404 Not Found";
+            die();
+        }else{
+            r2(getUrl('login'));
+        }
     }
 } catch (Throwable $e) {
     Message::sendTelegram(
diff --git a/system/controllers/settings.php b/system/controllers/settings.php
index b1323afe..c01f1248 100644
--- a/system/controllers/settings.php
+++ b/system/controllers/settings.php
@@ -216,6 +216,16 @@ switch ($action) {
             $_POST['man_fields_custom'] = isset($_POST['man_fields_custom']) ? 'yes' : 'no';
             $enable_session_timeout = isset($_POST['enable_session_timeout']) ? 1 : 0;
             $_POST['enable_session_timeout'] = $enable_session_timeout;
+
+            // hide dashboard
+            $_POST['hide_mrc'] = _post('hide_mrc', 'no');
+            $_POST['hide_tms'] = _post('hide_tms', 'no');
+            $_POST['hide_al'] = _post('hide_al', 'no');
+            $_POST['hide_uet'] = _post('hide_uet', 'no');
+            $_POST['hide_vs'] = _post('hide_vs', 'no');
+            $_POST['hide_pg'] = _post('hide_pg', 'no');
+            $_POST['hide_aui'] = _post('hide_aui', 'no');
+
             foreach ($_POST as $key => $value) {
                 $d = ORM::for_table('tbl_appconfig')->where('setting', $key)->find_one();
                 if ($d) {
diff --git a/ui/ui/admin/settings/app.tpl b/ui/ui/admin/settings/app.tpl
index 3747e2c5..03965655 100644
--- a/ui/ui/admin/settings/app.tpl
+++ b/ui/ui/admin/settings/app.tpl
@@ -137,11 +137,7 @@
 
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="HideDashboardContent">
             <h4 class="panel-title">
@@ -177,11 +173,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/login-page-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel" id="accordion" role="tablist" aria-multiselectable="true">
         <div class="panel-heading" role="tab" id="LoginPage">
             <h3 class="panel-title">
@@ -285,11 +277,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="Registration">
             <h4 class="panel-title">
@@ -426,12 +414,8 @@
             </div>
         </div>
     </div>
-</form>
 
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="Security">
             <h4 class="panel-title">
@@ -504,11 +488,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="Voucher">
             <h4 class="panel-title">
@@ -572,11 +552,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="FreeRadius">
             <h4 class="panel-title">
@@ -607,11 +583,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="ExtendPostpaidExpiration">
             <h4 class="panel-title">
@@ -655,11 +627,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="CustomerBalanceSystem">
             <h4 class="panel-title">
@@ -711,11 +679,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="TelegramNotification">
             <h4 class="panel-title">
@@ -755,11 +719,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="SMSNotification">
             <h4 class="panel-title">
@@ -818,11 +778,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="WhatsappNotification">
             <h4 class="panel-title">
@@ -856,11 +812,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="EmailNotification">
             <h4 class="panel-title">
@@ -942,11 +894,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="UserNotification">
             <h4 class="panel-title">
@@ -1009,11 +957,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="TawkToChatWidget">
             <h4 class="panel-title">
@@ -1050,11 +994,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="APIKey">
             <h4 class="panel-title">
@@ -1081,11 +1021,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="Proxy">
             <h4 class="panel-title">
@@ -1118,11 +1054,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="TaxSystem">
             <h4 class="panel-title">
@@ -1193,11 +1125,7 @@
             </div>
         </div>
     </div>
-</form>
 
-<form class="form-horizontal" method="post" role="form" action="{Text::url('')}settings/app-post"
-    enctype="multipart/form-data">
-    <input type="hidden" name="csrf_token" value="{$csrf_token}">
     <div class="panel">
         <div class="panel-heading" role="tab" id="GithubAuthentication">
             <h4 class="panel-title">
@@ -1243,7 +1171,6 @@
         </div>
     </div>
 </form>
-
 <div class="bs-callout bs-callout-info" id="callout-navbar-role">
     <h4><b>{Lang::T('Settings For Mikrotik')}</b></h4>
     <p>/ip hotspot walled-garden <br>
diff --git a/version.json b/version.json
index f9dfd124..e3b6b28d 100644
--- a/version.json
+++ b/version.json
@@ -1,3 +1,3 @@
 {
-    "version": "2025.2.11"
+    "version": "2025.2.12.1"
 }
\ No newline at end of file