Update app.py

app.py

@@ -634,31 +634,27 @@ def write_order_vk_full():
 @app.route('/wr_order_vk', methods=['GET'])
 def wr_order_vk():
     try:
-        logging.debug("Starting shop_order_new")
+        logging.debug("Starting wr_order_vk")
         api_sys_control = request.args.get('api_sys')
 
         if api_sys_control != api_key_sys:
             logging.warning("Unauthorized access attempt")
             return json.dumps({"error": "Unauthorized access"}), 403
             
-
         vkid = request.args.get('vk_id', '')        
-
         order = request.args.get('order', '')
         status = request.args.get('status', '')
         del_flag = request.args.get('del', '')
         n_con_flag = request.args.get('n_con', '')
 
-        if not email or not phone:
-            logging.error("Email and phone are required")
-            return json.dumps({"error": "Email and phone are required"}), 400
-
-        phone = clean_phone_number_ss(phone)
+        if not vkid:
+            logging.error("VK ID is required")
+            return json.dumps({"error": "VK ID is required"}), 400
 
         conn = sqlite3.connect(DATABASE_NEW)
         cursor = conn.cursor()
 
-        cursor.execute("SELECT * FROM contacts WHERE email = ? OR phone = ?", (email, phone))
+        cursor.execute("SELECT * FROM contacts WHERE vk_id = ?", (vkid,))
         result = cursor.fetchone()
 
         if result:
@@ -686,8 +682,8 @@ def wr_order_vk():
 
         if result:
             set_clause = ', '.join([f"{col} = ?" for col in columns_to_update])
-            query = f"UPDATE contacts SET {set_clause} WHERE email = ? OR phone = ?"
-            cursor.execute(query, values_to_update + [email, phone])
+            query = f"UPDATE contacts SET {set_clause} WHERE vk_id = ?"
+            cursor.execute(query, values_to_update + [vkid])
         else:
             query = f"INSERT INTO contacts ({', '.join(columns_to_update)}) VALUES ({', '.join(['?' for _ in columns_to_update])})"
             cursor.execute(query, values_to_update)