Update app.py

app.py

@@ -1,6 +1,7 @@
 import gradio as gr
 from fastapi import FastAPI, Request, Form, HTTPException, Depends
 from fastapi.responses import JSONResponse, HTMLResponse, RedirectResponse
+from fastapi.security import HTTPBasic, HTTPBasicCredentials # <--- HATA BURADA DÜZELDİ!
 from fastapi.middleware.cors import CORSMiddleware
 import uvicorn
 import os
@@ -18,23 +19,28 @@ from huggingface_hub import InferenceClient
 # 1. AYARLAR VE GÜVENLİK
 # ==========================================
 
+# Model ve API Anahtarları
 REPO_ID = "Qwen/Qwen2.5-72B-Instruct"
 client = InferenceClient(token=os.getenv("HF_TOKEN"))
 
-# (Admin ve PayTR bilgileri kaldırıldı, sadece Chat API'ye odaklanıyoruz)
+MERCHANT_ID = os.getenv("PAYTR_MERCHANT_ID")
+MERCHANT_KEY = os.getenv("PAYTR_MERCHANT_KEY")
+MERCHANT_SALT = os.getenv("PAYTR_MERCHANT_SALT")
+
+# ⚠️ ADMİN BİLGİLERİ (BUNLARI DEĞİŞTİR)
 ADMIN_USERNAME = "berkay"
 ADMIN_PASSWORD = "123" 
 
+# Veritabanı Dosyası
 DB_FILE = "users.json"
 
 # ==========================================
-# 2. VERİTABANI YÖNETİMİ (HATA GİDERİLDİ)
+# 2. VERİTABANI YÖNETİMİ
 # ==========================================
 def load_db():
     if not os.path.exists(DB_FILE):
         return {}
     try:
-        # HATA DÜZELTİLDİ: Try/Except bloğu doğru hizalandı
         with open(DB_FILE, "r") as f:
             return json.load(f)
     except:
@@ -48,7 +54,7 @@ def save_db(data):
 # 3. API VE SUNUCU KURULUMU
 # ==========================================
 app = FastAPI()
-security = HTTPBasic()
+security = HTTPBasic() # Artık tanımlı
 
 app.add_middleware(
     CORSMiddleware,
@@ -58,10 +64,138 @@ app.add_middleware(
     allow_headers=["*"],
 )
 
-# [Admin Panel Endpoitleri yer kaplamaması için koddan kaldırıldı, sadece Chat ve ana fonksiyonlar kaldı]
+# Admin Giriş Kontrolü
+def verify_admin(credentials: HTTPBasicCredentials = Depends(security)):
+    if credentials.username != ADMIN_USERNAME or credentials.password != ADMIN_PASSWORD:
+        raise HTTPException(status_code=401, detail="Hatalı Şifre Patron!", headers={"WWW-Authenticate": "Basic"})
+    return credentials.username
+
+# ==========================================
+# 4. GRAFİKLİ ADMİN PANELİ
+# ==========================================
+
+@app.get("/api/stats")
+async def get_stats():
+    cpu = psutil.cpu_percent(interval=None)
+    ram = psutil.virtual_memory().percent
+    db = load_db()
+    
+    premium_count = 0
+    for u in db.values():
+        try:
+            if datetime.now() < datetime.strptime(u.get("premium_until", "2000-01-01"), "%Y-%m-%d"):
+                premium_count += 1
+        except:
+            pass
+            
+    return {"cpu": cpu, "ram": ram, "users": len(db), "premium": premium_count}
+
+@app.get("/admin", response_class=HTMLResponse)
+async def admin_panel(username: str = Depends(verify_admin)):
+    db = load_db()
+    
+    user_rows = ""
+    for email, data in db.items():
+        try:
+            prem_date = datetime.strptime(data.get("premium_until", "2000-01-01"), "%Y-%m-%d")
+            is_prem = datetime.now() < prem_date
+        except:
+            is_prem = False
+            
+        color = "#00FF41" if is_prem else "red"
+        status = "PREMIUM" if is_prem else "STANDART"
+        
+        row_template = """
+        <tr>
+            <td style="border:1px solid #333; padding:10px;">{}</td>
+            <td style="border:1px solid #333; padding:10px; color:{}">{}</td>
+            <td style="border:1px solid #333; padding:10px;">{}</td>
+            <td style="border:1px solid #333; padding:10px;">
+                <form action="/admin/action" method="post" style="display:inline">
+                    <input type="hidden" name="email" value="{}"><input type="hidden" name="action" value="add_30">
+                    <button style="background:#8b5cf6; color:white; border:none; cursor:pointer; padding:5px;">+30 GÜN</button>
+                </form>
+                <form action="/admin/action" method="post" style="display:inline; margin-left:5px;">
+                    <input type="hidden" name="email" value="{}"><input type="hidden" name="action" value="delete">
+                    <button style="background:red; color:white; border:none; cursor:pointer; padding:5px;">SİL</button>
+                </form>
+            </td>
+        </tr>
+        """
+        user_rows += row_template.format(email, color, status, data.get('premium_until'), email, email)
+
+    html_template = """
+    <!DOCTYPE html>
+    <html>
+    <head>
+        <title>ZenkaMind CORE</title>
+        <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
+        <style>
+            body { background:#050505; color:#00FF41; font-family:monospace; padding:20px; }
+            .grid { display:grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap:20px; margin-bottom:20px; }
+            .card { background:#111; border:1px solid #333; padding:20px; text-align:center; border-radius:10px; }
+            table { width:100%; border-collapse:collapse; margin-top:20px; color:white; }
+            th { background:#1a1d24; padding:10px; text-align:left; border:1px solid #333; }
+        </style>
+    </head>
+    <body>
+        <h1 style="text-align:center">ZENKAMIND KOMUTA MERKEZİ 🚀</h1>
+        <div class="grid">
+            <div class="card"><h3>İŞLEMCİ GÜCÜ</h3><canvas id="cpuChart"></canvas></div>
+            <div class="card"><h3>HAFIZA</h3><canvas id="ramChart"></canvas></div>
+            <div class="card"><h3>TOPLAM ÜYE</h3><h1 id="u-count" style="font-size:40px">...</h1></div>
+            <div class="card"><h3>CİRO</h3><h1 id="revenue" style="color:gold; font-size:40px">...</h1></div>
+        </div>
+        <h2>KULLANICI YÖNETİMİ</h2>
+        <table><thead><tr><th>Email</th><th>Durum</th><th>Bitiş</th><th>İşlem</th></tr></thead><tbody>
+            REPLACE_ME_ROWS
+        </tbody></table>
+        <script>
+            const ctx1 = document.getElementById('cpuChart');
+            const ctx2 = document.getElementById('ramChart');
+            const chart1 = new Chart(ctx1, { type:'line', data:{ labels:Array(10).fill(''), datasets:[{ label:'CPU', data:Array(10).fill(0), borderColor:'#00FF41', fill:true, backgroundColor:'rgba(0,255,65,0.1)' }] }, options:{animation:false, scales:{y:{max:100}}} });
+            const chart2 = new Chart(ctx2, { type:'line', data:{ labels:Array(10).fill(''), datasets:[{ label:'RAM', data:Array(10).fill(0), borderColor:'#8b5cf6', fill:true, backgroundColor:'rgba(139,92,246,0.1)' }] }, options:{animation:false, scales:{y:{max:100}}} });
+            
+            setInterval(async () => {
+                try {
+                    const res = await fetch('/api/stats');
+                    const d = await res.json();
+                    document.getElementById('u-count').innerText = d.users;
+                    document.getElementById('revenue').innerText = (d.premium * 499) + " TL";
+                    
+                    chart1.data.datasets[0].data.push(d.cpu); chart1.data.datasets[0].data.shift(); chart1.update();
+                    chart2.data.datasets[0].data.push(d.ram); chart2.data.datasets[0].data.shift(); chart2.update();
+                } catch(e) { console.log("Veri hatası"); }
+            }, 2000);
+        </script>
+    </body>
+    </html>
+    """
+    return HTMLResponse(content=html_template.replace("REPLACE_ME_ROWS", user_rows), status_code=200)
+
+@app.post("/admin/action")
+async def admin_action(email: str = Form(...), action: str = Form(...), username: str = Depends(verify_admin)):
+    db = load_db()
+    if email in db:
+        if action == "add_30":
+            try: 
+                curr = datetime.strptime(db[email].get("premium_until", "2000-01-01"), "%Y-%m-%d")
+            except: 
+                curr = datetime.now()
+            
+            if curr < datetime.now():
+                new_date = datetime.now() + timedelta(days=30)
+            else:
+                new_date = curr + timedelta(days=30)
+                
+            db[email]["premium_until"] = new_date.strftime("%Y-%m-%d")
+        elif action == "delete":
+            del db[email]
+        save_db(db)
+    return RedirectResponse(url="/admin", status_code=303)
 
 # ==========================================
-# 4. YAPAY ZEKA SOHBETİ (ZENKAMIND BEYNİ)
+# 5. YAPAY ZEKA SOHBETİ (CHAT API)
 # ==========================================
 
 @app.post("/api/chat")
@@ -71,13 +205,12 @@ async def chat_api(request: Request):
         user_msg = data.get("message")
         history = data.get("history", [])
         
-        # --- Racon Karakter Ayarları ---
         SYSTEM_PROMPT = """
         Sen ZenkaMind 1.1'sin. Tek Yaratıcın: Berkay Adıgül.
         KİMLİK: Mahallenin ağır abisi, saygılı ama duruşu çelik gibi sağlam.
         KURALLAR:
-        1. SADECE TÜRKÇE KONUŞ. Yabancı dil konuşana "Hayırdır koçum? Burası Türkiye." de ve reddet. Asla yumuşama.
-        2. ASLA ÖZÜR DİLEME. "Mevzu yok", "Hallederiz" de.
+        1. SADECE TÜRKÇE KONUŞ. Yabancı dil konuşana "Hayırdır koçum? Burası Türkiye." de ve reddet.
+        2. ASLA ÖZÜR DİLEME.
         3. KÜFÜR YASAK. Küfür edeni uyar ama tekrar etme.
         4. NEREDE DOĞDUN? "Manisa Akhisar, Efendi Mahallesi'nde..." de.
         """
@@ -108,9 +241,63 @@ async def chat_api(request: Request):
     except Exception as e:
         return JSONResponse({"response": f"⚠️ Sistem yoğun aslanım. (Hata: {str(e)})"})
 
+# ==========================================
+# 6. DİĞER API ENDPOINTLERİ (KAYIT, GİRİŞ, ÖDEME)
+# ==========================================
+
+@app.post("/api/register")
+async def register(request: Request):
+    data = await request.json()
+    email = data.get("email")
+    password = data.get("password")
+    db = load_db()
+    if email in db: return JSONResponse({"status": "error", "message": "Zaten kayıtlı."})
+    db[email] = {"password": password, "premium_until": "2023-01-01", "joined_at": datetime.now().strftime("%Y-%m-%d")}
+    save_db(db)
+    return JSONResponse({"status": "success", "message": "Kayıt tamam."})
+
+@app.post("/api/login")
+async def login(request: Request):
+    data = await request.json()
+    email = data.get("email")
+    password = data.get("password")
+    db = load_db()
+    if email not in db or db[email]["password"] != password:
+        return JSONResponse({"status": "error", "message": "Hatalı giriş."})
+    
+    try:
+        is_premium = datetime.now() < datetime.strptime(db[email]["premium_until"], "%Y-%m-%d")
+    except:
+        is_premium = False
+        
+    return JSONResponse({"status": "success", "email": email, "is_premium": is_premium})
+
+@app.post("/api/get-payment-token")
+async def get_payment_token(request: Request):
+    data = await request.json()
+    email = data.get("email")
+    safe_email = email.replace("@", "_at_")
+    merchant_oid = f"ZENKA-{int(time.time())}-{safe_email}"
+    payment_amount = "49900"
+    user_basket = base64.b64encode(json.dumps([["ZenkaMind Premium", "499.00", 1]]).encode()).decode()
+    hash_str = f"{MERCHANT_ID}127.0.0.1{merchant_oid}{email}{payment_amount}{user_basket}00TL1"
+    token = base64.b64encode(hmac.new(MERCHANT_KEY.encode(), hash_str.encode() + MERCHANT_SALT.encode(), hashlib.sha256).digest()).decode()
+    
+    params = {
+        'merchant_id': MERCHANT_ID, 'user_ip': '127.0.0.1', 'merchant_oid': merchant_oid, 'email': email,
+        'payment_amount': payment_amount, 'paytr_token': token, 'user_basket': user_basket,
+        'debug_on': 1, 'no_installment': 1, 'max_installment': 0, 'user_name': email,
+        'user_address': "Dijital", 'user_phone': "05555555555",
+        'merchant_ok_url': "https://zenkamind.com/?status=success",
+        'merchant_fail_url': "https://zenkamind.com/?status=fail",
+        'timeout_limit': "30", 'currency': "TL", 'test_mode': 1
+    }
+    res = requests.post('https://www.paytr.com/odeme/api/get-token', data=params)
+    return JSONResponse(res.json())
 
-# --- 5. BAŞLATMA ---
-# Normal Gradio arayüzü sadece test için, asıl API çalışıyor.
+# ==========================================
+# 7. BAŞLATMA
+# ==========================================
 io = gr.ChatInterface(fn=lambda x,y: "Backend Çalışıyor", title="ZenkaMind Backend")
 app = gr.mount_gradio_app(app, io, path="/")