Update app.py

app.py

@@ -187,7 +187,7 @@ def get_db_connection_user():
     conn.row_factory = sqlite3.Row
     return conn
 
-@app.route('/user_db_set', methods=['GET','POST'])
+@app.route('/user_db_set', methods=['GET'])
 def get_user():
     # Проверка API-ключа
     api_key_sys_control = request.args.get('api_sys')
@@ -248,7 +248,7 @@ def get_user():
 
 
 # Отдаем дату онлайн
-@app.route('/get_current_time', methods=['GET','POST'])
+@app.route('/get_current_time', methods=['GET'])
 def get_current_time():
     utc_now = datetime.utcnow()
     msk_tz = pytz.timezone('Europe/Moscow')
@@ -416,7 +416,7 @@ def add_or_update_contact(contact_data, db_name):
 
 
 
-@app.route('/add_user_home', methods=['GET','POST'])
+@app.route('/add_user_home', methods=['GET'])
 def add_user_home():
     global current_curator_index
 
@@ -456,7 +456,7 @@ def add_user_home():
         logging.error(f"Error adding user: {e}")
         return jsonify({'status': 'error', 'message': str(e)}), 500
 
-@app.route('/user', methods=['GET','POST'])
+@app.route('/user', methods=['GET'])
 def user():
     global current_curator_index
 
@@ -496,7 +496,7 @@ def user():
         logging.error(f"Error adding user: {e}")
         return jsonify({'status': 'error', 'message': str(e)}), 500
 
-@app.route('/add_user_mess', methods=['GET','POST'])
+@app.route('/add_user_mess', methods=['GET'])
 def add_user_mess():
     global current_curator_index
 
@@ -625,49 +625,25 @@ def shop_order_new():
 
 
 # Работа из VK_ID Запись ордер с полными данными
-
-@app.route('/wr_order_vk_full', methods=['GET', 'POST'])
+@app.route('/wr_order_vk_full', methods=['POST'])
 def write_order_vk_full():
     try:
         logging.debug("Starting shop_order_new")
-        api_sys_control = request.args.get('api_sys')
 
+        # Читаем параметры из POST-запроса (формы)
+        api_sys_control = request.form.get('api_sys')
         if api_sys_control != api_key_sys:
             logging.warning("Unauthorized access attempt")
             return json.dumps({"error": "Unauthorized access"}), 403
 
-        # Читаем параметры из GET-запроса
-        name = request.args.get('name', '')
-        email = request.args.get('email', '')
-        vkid = request.args.get('vk_id', '')
-        phone = request.args.get('phone', '').lstrip('+')
-        order = request.args.get('order', '')
-        status = request.args.get('status', '')
-        del_flag = request.args.get('del', '')
-        n_con_flag = request.args.get('n_con', '')
-
-        # Читаем параметры из POST-запроса (формы)
-        if request.method == 'POST':
-            name = request.form.get('name', name)
-            email = request.form.get('email', email)
-            vkid = request.form.get('vk_id', vkid)
-            phone = request.form.get('phone', phone).lstrip('+')
-            order = request.form.get('order', order)
-            status = request.form.get('status', status)
-            del_flag = request.form.get('del', del_flag)
-            n_con_flag = request.form.get('n_con', n_con_flag)
-
-        # Читаем параметры из POST-запроса (JSON)
-        if request.is_json:
-            json_data = request.get_json()
-            name = json_data.get('name', name)
-            email = json_data.get('email', email)
-            vkid = json_data.get('vk_id', vkid)
-            phone = json_data.get('phone', phone).lstrip('+')
-            order = json_data.get('order', order)
-            status = json_data.get('status', status)
-            del_flag = json_data.get('del', del_flag)
-            n_con_flag = json_data.get('n_con', n_con_flag)
+        name = request.form.get('name', '')
+        email = request.form.get('email', '')
+        vkid = request.form.get('vk_id', '')
+        phone = request.form.get('phone', '').lstrip('+')
+        order = request.form.get('order', '')
+        status = request.form.get('status', '')
+        del_flag = request.form.get('del', '')
+        n_con_flag = request.form.get('n_con', '')
 
         if not email or not phone:
             logging.error("Email and phone are required")