sunucuya veritabanı kur

.env.example

@@ -0,0 +1,14 @@
+```
+# Server Configuration
+PORT=3001
+NODE_ENV=development
+
+# MongoDB Configuration
+MONGODB_URI=mongodb://localhost:27017/pencere-hesaplama
+
+# JWT Secret
+JWT_SECRET=your-super-secret-jwt-key-change-this-in-production
+
+# Optional: MongoDB Atlas Cloud Database
+# MONGODB_URI=mongodb+srv://username:password@cluster.mongodb.net/pencere-hesaplama?retryWrites=true&w=majority
+```

api-client.js

@@ -0,0 +1,261 @@
+// API Client for Server Communication
+class PencereAPI {
+    constructor() {
+        this.baseURL = process.env.API_BASE_URL || 'http://localhost:3001/api';
+        this.token = localStorage.getItem('authToken');
+        this.user = JSON.parse(localStorage.getItem('currentUser') || 'null');
+    }
+
+    // Set authentication token
+    setToken(token) {
+        this.token = token;
+        if (token) {
+            localStorage.setItem('authToken', token);
+        } else {
+            localStorage.removeItem('authToken');
+        }
+    }
+
+    // Set current user
+    setUser(user) {
+        this.user = user;
+        if (user) {
+            localStorage.setItem('currentUser', JSON.stringify(user));
+        } else {
+            localStorage.removeItem('currentUser');
+        }
+    }
+
+    // Generic request method
+    async request(endpoint, options = {}) {
+        const url = `${this.baseURL}${endpoint}`;
+        const config = {
+            headers: {
+                'Content-Type': 'application/json',
+                ...options.headers
+            },
+            ...options
+        };
+
+        if (this.token) {
+            config.headers.Authorization = `Bearer ${this.token}`;
+        }
+
+        try {
+            const response = await fetch(url, config);
+            
+            if (response.status === 401) {
+                // Token expired or invalid
+                this.setToken(null);
+                this.setUser(null);
+                window.location.href = '#login';
+                throw new Error('Authentication required');
+            }
+
+            const data = await response.json();
+            
+            if (!response.ok) {
+                throw new Error(data.error || 'Request failed');
+            }
+            
+            return data;
+        } catch (error) {
+            console.error(`API Error (${endpoint}):`, error);
+            throw error;
+        }
+    }
+
+    // Authentication methods
+    async login(username, password) {
+        const data = await this.request('/auth/login', {
+            method: 'POST',
+            body: JSON.stringify({ username, password })
+        });
+        
+        this.setToken(data.token);
+        this.setUser(data.user);
+        return data;
+    }
+
+    async register(userData) {
+        return await this.request('/auth/register', {
+            method: 'POST',
+            body: JSON.stringify(userData)
+        });
+    }
+
+    logout() {
+        this.setToken(null);
+        this.setUser(null);
+    }
+
+    // Company methods
+    async getCompany() {
+        return await this.request('/company');
+    }
+
+    async updateCompany(companyData) {
+        return await this.request('/company', {
+            method: 'PUT',
+            body: companyData
+        });
+    }
+
+    // System methods
+    async getSystems() {
+        return await this.request('/systems');
+    }
+
+    async createSystem(systemData) {
+        return await this.request('/systems', {
+            method: 'POST',
+            body: systemData
+        });
+    }
+
+    async updateSystem(id, systemData) {
+        return await this.request(`/systems/${id}`, {
+            method: 'PUT',
+            body: systemData
+        });
+    }
+
+    async deleteSystem(id) {
+        return await this.request(`/systems/${id}`, {
+            method: 'DELETE'
+        });
+    }
+
+    // Customer methods
+    async getCustomers() {
+        return await this.request('/customers');
+    }
+
+    async createCustomer(customerData) {
+        return await this.request('/customers', {
+            method: 'POST',
+            body: customerData
+        });
+    }
+
+    async updateCustomer(id, customerData) {
+        return await this.request(`/customers/${id}`, {
+            method: 'PUT',
+            body: customerData
+        });
+    }
+
+    async deleteCustomer(id) {
+        return await this.request(`/customers/${id}`, {
+            method: 'DELETE'
+        });
+    }
+
+    // Position methods
+    async getPositions(customerId = null) {
+        const query = customerId ? `?customerId=${customerId}` : '';
+        return await this.request(`/positions${query}`);
+    }
+
+    async createPosition(positionData) {
+        return await this.request('/positions', {
+            method: 'POST',
+            body: positionData
+        });
+    }
+
+    async updatePosition(id, positionData) {
+        return await this.request(`/positions/${id}`, {
+            method: 'PUT',
+            body: positionData
+        });
+    }
+
+    async deletePosition(id) {
+        return await this.request(`/positions/${id}`, {
+            method: 'DELETE'
+        });
+    }
+
+    // PDF Settings methods
+    async getPDFSettings(type = null) {
+        const query = type ? `?type=${type}` : '';
+        return await this.request(`/pdf-settings${query}`);
+    }
+
+    async updatePDFSettings(settingsData, type = 'global') {
+        return await this.request('/pdf-settings', {
+            method: 'PUT',
+            body: { type, settings: settingsData }
+        });
+    }
+
+    // Backup methods
+    async createBackup() {
+        return await this.request('/backup');
+    }
+
+    async restoreData(backupData) {
+        return await this.request('/restore', {
+            method: 'POST',
+            body: backupData
+        });
+    }
+
+    // File upload helper
+    async uploadFile(file, endpoint = '/upload') {
+        const formData = new FormData();
+        formData.append('file', file);
+
+        const url = `${this.baseURL}${endpoint}`;
+        const config = {
+            method: 'POST',
+            body: formData,
+            headers: {}
+        };
+
+        if (this.token) {
+            config.headers.Authorization = `Bearer ${this.token}`;
+        }
+
+        try {
+            const response = await fetch(url, config);
+            const data = await response.json();
+            
+            if (!response.ok) {
+                throw new Error(data.error || 'Upload failed');
+            }
+            
+            return data;
+        } catch (error) {
+            console.error(`Upload Error (${endpoint}):`, error);
+            throw error;
+        }
+    }
+
+    // Check if user is authenticated
+    isAuthenticated() {
+        return !!this.token && !!this.user;
+    }
+
+    // Get user role
+    getUserRole() {
+        return this.user ? this.user.role : null;
+    }
+
+    // Check if user is admin
+    isAdmin() {
+        return this.getUserRole() === 'admin';
+    }
+}
+
+// Create global API instance
+const api = new PencereAPI();
+
+// Export for use in other modules
+if (typeof module !== 'undefined' && module.exports) {
+    module.exports = PencereAPI;
+} else {
+    window.PencereAPI = PencereAPI;
+    window.api = api;
+}

index.html

@@ -6,7 +6,8 @@
     <title>Pencere Ölçü Hesaplama - Profil Bazlı Cam Formülü</title>
     <script src="https://cdnjs.cloudflare.com/ajax/libs/jspdf/2.5.1/jspdf.umd.min.js"></script>
     <script src="https://cdnjs.cloudflare.com/ajax/libs/jspdf-autotable/3.5.28/jspdf.plugin.autotable.min.js"></script>
-    <style>
+    <script src="api-client.js"></script>
+<style>
         /* CSS kodları aynı kalacak, değişiklik yapmıyorum */
         * { box-sizing: border-box; margin: 0; padding: 0; }
         body { font-family: 'Segoe UI', sans-serif; padding: 20px; background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); min-height: 100vh; }
@@ -593,6 +594,13 @@ button { padding: 12px 20px; background: #4a90e2; color: white; border: none; bo
                 <button onclick="showPage('mainPage')">Ana Sayfa</button>
                 <button onclick="showPage('settingsPage')">Ayarlar</button>
                 <button onclick="showPage('customerPage')">Cariler</button>
+                <button onclick="showPage('backupPage')">Yedekleme</button>
+            </div>
+            <div class="nav-center">
+                <span id="userInfo" class="user-info">Hoş geldiniz!</span>
+            </div>
+            <div class="nav-right">
+                <button onclick="logout()" class="logout-btn">Çıkış</button>
             </div>
             <div class="nav-logo-container">
                 <img id="navCompanyLogo" src="" alt="Firma Logosu" class="nav-logo" style="display: none;">
@@ -635,10 +643,41 @@ button { padding: 12px 20px; background: #4a90e2; color: white; border: none; bo
                     <div class="input-row">
                         <input type="text" id="customerName" placeholder="Cari adı" list="customerList">
                         <datalist id="customerList"></datalist>
-                        <div id="newCustomerButtonContainer"></div>
-                    </div>
+                        <div id="newCustomerButtonContainer">
+            </div>
+        </div>
+
+        <!-- Yedekleme Sayfası -->
+        <div id="backupPage" style="display: none;">
+            <h1>Veri Yedekleme</h1>
+            
+            <div class="settings-section">
+                <h2>🗄️ Veri Yedekleme</h2>
+                <p class="description">Tüm verilerinizi yedekleyebilir veya mevcut yedekleri geri yükleyebilirsiniz.</p>
+                
+                <div class="backup-actions">
+                    <button class="export-btn" onclick="createBackup()">
+                        💾 Veri Yedeği Oluştur
+                    </button>
+                    <button class="add-btn" onclick="document.getElementById('restoreFile').click()">
+                        📥 Yedekten Geri Yükle
+                    </button>
+                    <input type="file" id="restoreFile" accept=".json" style="display: none;" onchange="restoreBackup(event)">
+                </div>
+                
+                <div id="backupStatus" class="status-message" style="display: none;"></div>
+            </div>
+            
+            <div class="settings-section">
+                <h2>📊 Sunucu Durumu</h2>
+                <div id="serverStatus">
+                    <div class="loading-spinner"></div>
+                    <span>Sunucu durumu kontrol ediliyor...</span>
                 </div>
             </div>
+        </div>
+</div>
+</div>
             <button onclick="calculateAndAddPos()">Hesapla ve Poz Ekle</button>
 
             <!-- Poz Listesi Bölümü -->
@@ -1507,9 +1546,14 @@ button { padding: 12px 20px; background: #4a90e2; color: white; border: none; bo
 <script>
         // jsPDF'yi global olarak tanımla
         window.jsPDF = window.jspdf.jsPDF;
-let systems = JSON.parse(localStorage.getItem('pencereSystems')) || [];
-        let customerData = JSON.parse(localStorage.getItem('customerData')) || {};
-        let currentSystemId = null;
+        
+        // Server API integration
+        let systems = [];
+        let customerData = {};
+        let positions = [];
+        let companyData = null;
+        let pdfSettings = {};
+let currentSystemId = null;
         let currentPartId = null;
         let calculationResults = {};
         let isEditingSystem = false;
@@ -2251,23 +2295,691 @@ function savePDFSettingsData() {
                 updateStorageStatus();
             }
         };
-        document.addEventListener('DOMContentLoaded', () => {
+        document.addEventListener('DOMContentLoaded', async () => {
+            // Check authentication
+            if (!api.isAuthenticated()) {
+                window.location.href = 'login.html';
+                return;
+            }
+            
+            // Update user info
+            updateUserInfo();
+            
+            // Load initial data
+            await loadInitialData();
+            
             updateSystemSelect();
             updateCustomerList();
             renderCustomerList();
             updateNewCustomerButton();
             updatePosList();
             updateStorageInfo();
-            updateCompanyInfoDisplay(); // Firma bilgilerini güncelle
+            updateCompanyInfoDisplay();
+            updateServerStatus();
             
-            // Test verisi ekle (eğer hiç veri yoksa)
+            // Check for test data
             if (systems.length === 0) {
-                addTestData();
+                if (confirm('Sistem verisi bulunamadı. Test verisi oluşturulsun mu?')) {
+                    await addTestData();
+                }
             }
             
             // Navbar logo'yu güncelle
             updateNavbarLogo();
         });
+
+        // Update user information in navbar
+        function updateUserInfo() {
+            const userInfo = document.getElementById('userInfo');
+            if (userInfo && api.user) {
+                userInfo.textContent = `Hoş geldiniz, ${api.user.username}!`;
+            }
+        }
+
+        // Load initial data from server
+        async function loadInitialData() {
+            try {
+                // Load systems
+                systems = await api.getSystems();
+                
+                // Load customers
+                const customers = await api.getCustomers();
+                customerData = {};
+                customers.forEach(customer => {
+                    customerData[customer.name] = {
+                        info: {
+                            phone: customer.phone,
+                            email: customer.email,
+                            address: customer.address,
+                            createdAt: customer.createdAt
+                        },
+                        pos: {}
+                    };
+                });
+                
+                // Load positions
+                positions = await api.getPositions();
+                
+                // Load company data
+                companyData = await api.getCompany();
+                
+                // Load PDF settings
+                const settingsData = await api.getPDFSettings();
+                pdfSettings = settingsData.settings || {};
+                
+            } catch (error) {
+                console.error('Veri yükleme hatası:', error);
+                showError('Veriler yüklenirken hata oluştu: ' + error.message);
+            }
+        }
+
+        // Logout function
+        async function logout() {
+            if (confirm('Çıkış yapmak istediğinizden emin misiniz?')) {
+                api.logout();
+                window.location.href = 'login.html';
+            }
+        }
+
+        // Show error message
+        function showError(message) {
+            const errorDiv = document.createElement('div');
+            errorDiv.className = 'error-toast';
+            errorDiv.innerHTML = `
+                <div class="error-content">
+                    <span class="error-icon">⚠️</span>
+                    <span class="error-message">${message}</span>
+                    <button class="error-close" onclick="this.parentElement.parentElement.remove()">×</button>
+                </div>
+            `;
+            document.body.appendChild(errorDiv);
+            
+            setTimeout(() => {
+                errorDiv.remove();
+            }, 5000);
+        }
+
+        // Show success message
+        function showSuccess(message) {
+            const successDiv = document.createElement('div');
+            successDiv.className = 'success-toast';
+            successDiv.innerHTML = `
+                <div class="success-content">
+                    <span class="success-icon">✅</span>
+                    <span class="success-message">${message}</span>
+                    <button class="success-close" onclick="this.parentElement.parentElement.remove()">×</button>
+                </div>
+            `;
+            document.body.appendChild(successDiv);
+            
+            setTimeout(() => {
+                successDiv.remove();
+            }, 3000);
+        }
+
+        // Update server status
+        async function updateServerStatus() {
+            const statusDiv = document.getElementById('serverStatus');
+            if (!statusDiv) return;
+            
+            try {
+                const startTime = Date.now();
+                await api.getSystems();
+                const responseTime = Date.now() - startTime;
+                
+                statusDiv.innerHTML = `
+                    <div class="server-status-success">
+                        <span class="status-icon">✅</span>
+                        <div>
+                            <strong>Sunucu Bağlantısı</strong><br>
+                            <small>Çevrimiçi - Yanıt süresi: ${responseTime}ms</small>
+                        </div>
+                    </div>
+                `;
+            } catch (error) {
+                statusDiv.innerHTML = `
+                    <div class="server-status-error">
+                        <span class="status-icon">❌</span>
+                        <div>
+                            <strong>Sunucu Bağlantısı</strong><br>
+                            <small>Çevrimdışı: ${error.message}</small>
+                        </div>
+                    </div>
+                `;
+            }
+        }
+
+        // Create backup
+        async function createBackup() {
+            const statusDiv = document.getElementById('backupStatus');
+            statusDiv.style.display = 'block';
+            statusDiv.className = 'status-message info';
+            statusDiv.innerHTML = '<div class="loading-spinner"></div> Yedek oluşturuluyor...';
+            
+            try {
+                const backup = await api.createBackup();
+                
+                // Create download link
+                const blob = new Blob([JSON.stringify(backup, null, 2)], { type: 'application/json' });
+                const url = URL.createObjectURL(blob);
+                const a = document.createElement('a');
+                a.href = url;
+                a.download = `backup-${new Date().toISOString().split('T')[0]}.json`;
+                a.click();
+                URL.revokeObjectURL(url);
+                
+                statusDiv.className = 'status-message success';
+                statusDiv.innerHTML = '✅ Yedek başarı oluşturuldu ve indirildi.';
+                
+                showSuccess('Yedekleme tamamlandı!');
+            } catch (error) {
+                statusDiv.className = 'status-message error';
+                statusDiv.innerHTML = `❌ Yedekleme hatası: ${error.message}`;
+                showError('Yedekleme başarısız: ' + error.message);
+            }
+        }
+
+        // Restore backup
+        async function restoreBackup(event) {
+            const file = event.target.files[0];
+            if (!file) return;
+            
+            const statusDiv = document.getElementById('backupStatus');
+            statusDiv.style.display = 'block';
+            statusDiv.className = 'status-message info';
+            statusDiv.innerHTML = '<div class="loading-spinner"></div> Yedek geri yükleniyor...';
+            
+            try {
+                const text = await file.text();
+                const backup = JSON.parse(text);
+                
+                await api.restoreData(backup);
+                
+                // Reload all data
+                await loadInitialData();
+                updateSystemSelect();
+                updateCustomerList();
+                renderCustomerList();
+                updatePosList();
+                updateCompanyInfoDisplay();
+                
+                statusDiv.className = 'status-message success';
+                statusDiv.innerHTML = '✅ Yedek başarıyla geri yüklendi.';
+                
+                showSuccess('Yedek geri yükleme tamamlandı!');
+                
+                // Clear file input
+                event.target.value = '';
+                
+            } catch (error) {
+                statusDiv.className = 'status-message error';
+                statusDiv.innerHTML = `❌ Geri yükleme hatası: ${error.message}`;
+                showError('Yedek geri yükleme başarısız: ' + error.message);
+            }
+        }
+
+        // Override save functions to use API
+        async function saveSystemData() {
+            try {
+                // Save systems that have been modified
+                for (const system of systems) {
+                    if (system._id) {
+                        await api.updateSystem(system._id, system);
+                    } else {
+                        const newSystem = await api.createSystem(system);
+                        system._id = newSystem._id;
+                    }
+                }
+                return true;
+            } catch (error) {
+                console.error('Sistem kaydetme hatası:', error);
+                showError('Sistem kaydedilemedi: ' + error.message);
+                return false;
+            }
+        }
+
+        async function saveCustomerData() {
+            try {
+                // Convert customerData back to array format for API
+                const customers = Object.entries(customerData).map(([name, data]) => ({
+                    name,
+                    phone: data.info.phone,
+                    email: data.info.email,
+                    address: data.info.address
+                }));
+                
+                for (const customer of customers) {
+                    if (customer._id) {
+                        await api.updateCustomer(customer._id, customer);
+                    } else {
+                        const newCustomer = await api.createCustomer(customer);
+                        customer._id = newCustomer._id;
+                    }
+                }
+                return true;
+            } catch (error) {
+                console.error('Cari kaydetme hatası:', error);
+                showError('Cari kaydedilemedi: ' + error.message);
+                return false;
+            }
+        }
+
+        async function savePosList() {
+            try {
+                for (const position of positions) {
+                    if (position._id) {
+                        await api.updatePosition(position._id, position);
+                    } else {
+                        const newPosition = await api.createPosition(position);
+                        position._id = newPosition._id;
+                    }
+                }
+                return true;
+            } catch (error) {
+                console.error('Poz kaydetme hatası:', error);
+                showError('Poz kaydedilemedi: ' + error.message);
+                return false;
+            }
+        }
+
+        // Override data loading functions
+        async function updateSystemSelect() {
+            const select = document.getElementById('systemSelect');
+            if (select) {
+                select.innerHTML = '<option value="">Sistem seçin...</option>' + 
+                    systems.map(s => `<option value="${s._id || s.id}">${s.name}</option>`).join('');
+            }
+        }
+
+        async function updateCustomerList() {
+            const customerList = document.getElementById('customerList');
+            if (customerList) {
+                customerList.innerHTML = '';
+                Object.keys(customerData).forEach(customerName => {
+                    const option = document.createElement('option');
+                    option.value = customerName;
+                    customerList.appendChild(option);
+                });
+            }
+        }
+
+        // Override position functions
+        async function updatePosList() {
+            const container = document.getElementById('posListContainer');
+            const list = document.getElementById('posList');
+            
+            if (!list) return;
+            
+            if (positions.length === 0) {
+                if (container) container.style.display = 'none';
+                list.innerHTML = '<div class="empty-state">Henüz poz yok</div>';
+                return;
+            }
+            
+            if (container) container.style.display = 'block';
+            
+            let html = '';
+            positions.forEach((pos, index) => {
+                const camParts = pos.systemId?.parts?.filter(p => p.type === 'cam') || [];
+                let camInfoHtml = '';
+                
+                if (camParts.length > 0) {
+                    camParts.forEach(camPart => {
+                        let camWidth = pos.width - 20;
+                        let camHeight = pos.height - 20;
+                        
+                        if (camPart.glassFormulas) {
+                            try {
+                                camWidth = evaluateFormula(camPart.glassFormulas.horizontal, pos.width, pos.height);
+                                camHeight = evaluateFormula(camPart.glassFormulas.vertical, pos.width, pos.height);
+                            } catch (error) {
+                                console.error('Cam formülü hatası:', error);
+                            }
+                        }
+                        
+                        camInfoHtml += `<div>${camPart.description}: ${Math.round(camWidth)}x${Math.round(camHeight)}mm (${camPart.quantity * pos.quantity} adet)</div>`;
+                    });
+                } else {
+                    camInfoHtml = `<div>${pos.glassInfo?.width || pos.width - 20}x${pos.glassInfo?.height || pos.height - 20}mm (${pos.quantity} adet)</div>`;
+                }
+                
+                html += `
+                <div class="pos-item">
+                    <div class="pos-header">
+                        <div class="pos-title">Poz #${pos.pozNumber || (index + 1)} - ${pos.projectName || 'Projesiz'}</div>
+                        <div class="pos-actions">
+                            <button class="edit-btn" onclick="editPos(${index})">Düzenle</button>
+                            <button class="pdf-btn" onclick="generatePosPDF(${index})">PDF</button>
+                            <button class="delete-btn" onclick="deletePos(${index})">Sil</button>
+                        </div>
+                    </div>
+                    <div class="pos-details">
+                        <div class="pos-detail-item">
+                            <div class="pos-detail-label">Sistem</div>
+                            <div class="pos-detail-value">${pos.systemId?.name || 'Bilinmeyen Sistem'}</div>
+                        </div>
+                        <div class="pos-detail-item">
+                            <div class="pos-detail-label">Ölçüler</div>
+                            <div class="pos-detail-value">${pos.width}x${pos.height}mm</div>
+                        </div>
+                        <div class="pos-detail-item">
+                            <div class="pos-detail-label">Adet</div>
+                            <div class="pos-detail-value">${pos.quantity}</div>
+                        </div>
+                        <div class="pos-detail-item">
+                            <div class="pos-detail-label">Toplam Alan</div>
+                            <div class="pos-detail-value">${pos.glassInfo?.totalArea || '0.00'} m²</div>
+                        </div>
+                        <div class="pos-detail-item">
+                            <div class="pos-detail-label">Cari</div>
+                            <div class="pos-detail-value">${pos.customerName || 'Genel'}</div>
+                        </div>
+                        <div class="pos-detail-item">
+                            <div class="pos-detail-label">Tarih</div>
+                            <div class="pos-detail-value">${new Date(pos.createdAt).toLocaleDateString('tr-TR')}</div>
+                        </div>
+                    </div>
+                    <div class="pos-details">
+                        <div class="pos-detail-item">
+                            <div class="pos-detail-label">Yatay Profiller</div>
+                            <div class="pos-detail-value">
+                                ${(pos.horizontalParts || []).map(p => `${p.name}: ${p.size}mm (${p.quantity} adet)`).join('<br>')}
+                            </div>
+                        </div>
+                        <div class="pos-detail-item">
+                            <div class="pos-detail-label">Dikey Profiller</div>
+                            <div class="pos-detail-value">
+                                ${(pos.verticalParts || []).map(p => `${p.name}: ${p.size}mm (${p.quantity} adet)`).join('<br>')}
+                            </div>
+                        </div>
+                        <div class="pos-detail-item">
+                            <div class="pos-detail-label">Cam</div>
+                            <div class="pos-detail-value">${camInfoHtml}</div>
+                        </div>
+                    </div>
+                </div>`;
+            });
+            
+            list.innerHTML = html;
+        }
+
+        // Override calculation function
+        async function calculateAndAddPos() {
+            const systemId = document.getElementById('systemSelect').value;
+            const width = parseInt(document.getElementById('width').value) || 0;
+            const height = parseInt(document.getElementById('height').value) || 0;
+            const quantity = parseInt(document.getElementById('quantity').value) || 1;
+            
+            if (!systemId || !width || !height) {
+                showError('Lütfen sistem ve geçerli ölçüler seçin!');
+                return;
+            }
+            
+            const system = systems.find(s => (s._id || s.id) === systemId);
+            if (!system) {
+                showError('Sistem bulunamadı!');
+                return;
+            }
+            
+            // Calculate parts
+            const horizontalParts = system.parts?.filter(p => p.type === 'yatay').map(p => {
+                let size = width - p.reduction;
+                if (p.advancedFormula?.formula) {
+                    try {
+                        size = evaluateFormula(p.advancedFormula.formula, width, height);
+                    } catch (error) {
+                        console.error('Formül hatası:', error);
+                    }
+                }
+                return {
+                    name: p.description || p.name,
+                    size: Math.round(size),
+                    quantity: p.quantity * quantity,
+                    formulaUsed: !!p.advancedFormula?.formula
+                };
+            }) || [];
+            
+            const verticalParts = system.parts?.filter(p => p.type === 'dikey').map(p => {
+                let size = height - p.reduction;
+                if (p.advancedFormula?.formula) {
+                    try {
+                        size = evaluateFormula(p.advancedFormula.formula, width, height);
+                    } catch (error) {
+                        console.error('Formül hatası:', error);
+                    }
+                }
+                return {
+                    name: p.description || p.name,
+                    size: Math.round(size),
+                    quantity: p.quantity * quantity,
+                    formulaUsed: !!p.advancedFormula?.formula
+                };
+            }) || [];
+            
+            const camParts = system.parts?.filter(p => p.type === 'cam').map(camPart => {
+                let glassWidth = width - 20;
+                let glassHeight = height - 20;
+                
+                if (camPart.glassFormulas) {
+                    try {
+                        glassWidth = evaluateFormula(camPart.glassFormulas.horizontal, width, height);
+                        glassHeight = evaluateFormula(camPart.glassFormulas.vertical, width, height);
+                    } catch (error) {
+                        console.error('Cam formülü hatası:', error);
+                    }
+                }
+                
+                const totalArea = (glassWidth * glassHeight * quantity / 1000000).toFixed(2);
+                
+                return {
+                    name: camPart.description || camPart.name,
+                    quantity: camPart.quantity * quantity,
+                    size: `${Math.round(glassWidth)}x${Math.round(glassHeight)}`,
+                    width: Math.round(glassWidth),
+                    height: Math.round(glassHeight),
+                    totalArea: totalArea
+                };
+            }) || [];
+            
+            const totalArea = camParts.length > 0 ? camParts[0].totalArea : '0.00';
+            
+            const newPosition = {
+                systemId: system._id,
+                projectName: document.getElementById('projectName').value,
+                width,
+                height,
+                quantity,
+                customerName: document.getElementById('customerName').value,
+                horizontalParts,
+                verticalParts,
+                glassParts: camParts,
+                glassInfo: { 
+                    width: camParts.length > 0 ? camParts[0].width : width - 20, 
+                    height: camParts.length > 0 ? camParts[0].height : height - 20, 
+                    totalArea
+                },
+                pozNumber: positions.length + 1
+            };
+            
+            try {
+                const savedPosition = await api.createPosition(newPosition);
+                positions.push(savedPosition);
+                updatePosList();
+                showSuccess('Hesaplama yapıldı ve poz listeye eklendi!');
+                
+                // Clear form
+                document.getElementById('width').value = '';
+                document.getElementById('height').value = '';
+                document.getElementById('quantity').value = '1';
+                document.getElementById('projectName').value = '';
+                document.getElementById('customerName').value = '';
+                
+            } catch (error) {
+                showError('Poz kaydedilemedi: ' + error.message);
+            }
+        }
+
+        // Override company functions
+        async function updateCompanyInfoDisplay() {
+            if (!companyData) return;
+            
+            const elements = {
+                companyNameDisplay: companyData.name,
+                companyAddressDisplay: companyData.address || 'Adres belirtilmemiş',
+                companyContactDisplay: [
+                    companyData.phone ? `📞 ${companyData.phone}` : '',
+                    companyData.email ? `✉️ ${companyData.email}` : ''
+                ].filter(Boolean).join(' | ') || 'İletişim bilgisi belirtilmemiş',
+                companyWebsiteDisplay: companyData.website ? `🌐 ${companyData.website}` : 'Website belirtilmemiş',
+                companyDescriptionDisplay: companyData.description || 'Açıklama belirtilmemiş'
+            };
+            
+            Object.entries(elements).forEach(([id, value]) => {
+                const element = document.getElementById(id);
+                if (element) element.textContent = value;
+            });
+            
+            const logoDisplay = document.getElementById('companyLogoDisplay');
+            if (logoDisplay) {
+                logoDisplay.innerHTML = companyData.logo ? `<img src="${companyData.logo}" alt="Firma Logosu">` : '<div style="color: #a0aec0; font-size: 12px;">Logo yok</div>';
+            }
+            
+            const navbarLogo = document.getElementById('navCompanyLogo');
+            if (navbarLogo) {
+                if (companyData.logo) {
+                    navbarLogo.src = companyData.logo;
+                    navbarLogo.style.display = 'block';
+                } else {
+                    navbarLogo.style.display = 'none';
+                }
+            }
+        }
+
+        // Override test data function
+        async function addTestData() {
+            const testSystem = {
+                name: 'PVC Pencere Sistemi',
+                image: null,
+                parts: [
+                    { 
+                        name: 'Üst Profil', 
+                        type: 'yatay', 
+                        quantity: 1, 
+                        reduction: 10, 
+                        image: null,
+                        description: 'Pencerenin üst kısmında kullanılan yatay profil',
+                        advancedFormula: {
+                            formula: 'width - 10',
+                            type: 'fixed'
+                        }
+                    },
+                    { 
+                        name: 'Alt Profil', 
+                        type: 'yatay', 
+                        quantity: 1, 
+                        reduction: 10, 
+                        image: null,
+                        description: 'Pencerenin alt kısmında kullanılan yatay profil',
+                        advancedFormula: {
+                            formula: 'width - 10',
+                            type: 'fixed'
+                        }
+                    },
+                    { 
+                        name: 'Sol Profil', 
+                        type: 'dikey', 
+                        quantity: 1, 
+                        reduction: 10, 
+                        image: null,
+                        description: 'Pencerenin sol tarafında kullanılan dikey profil',
+                        advancedFormula: {
+                            formula: 'height - 10',
+                            type: 'fixed'
+                        }
+                    },
+                    { 
+                        name: 'Sağ Profil', 
+                        type: 'dikey', 
+                        quantity: 1, 
+                        reduction: 10, 
+                        image: null,
+                        description: 'Pencerenin sağ tarafında kullanılan dikey profil',
+                        advancedFormula: {
+                            formula: 'height - 10',
+                            type: 'fixed'
+                        }
+                    },
+                    { 
+                        name: 'Cam', 
+                        type: 'cam', 
+                        quantity: 1, 
+                        reduction: 0, 
+                        image: null,
+                        description: '4-16-4 İzolasyon Cam - Çift camlı izolasyon cam ünitesi',
+                        glassFormulas: {
+                            horizontal: 'width - 20',
+                            horizontalType: 'fixed',
+                            vertical: 'height - 20',
+                            verticalType: 'fixed'
+                        }
+                    }
+                ]
+            };
+            
+            try {
+                const savedSystem = await api.createSystem(testSystem);
+                systems.push(savedSystem);
+                
+                // Create test customer
+                const testCustomer = {
+                    name: 'Test Cari',
+                    phone: '0555 555 55 55',
+                    email: 'test@cari.com',
+                    address: 'Test Adresi'
+                };
+                
+                const savedCustomer = await api.createCustomer(testCustomer);
+                customerData[testCustomer.name] = {
+                    info: {
+                        phone: savedCustomer.phone,
+                        email: savedCustomer.email,
+                        address: savedCustomer.address,
+                        createdAt: savedCustomer.createdAt
+                    },
+                    pos: {}
+                };
+                
+                updateSystemSelect();
+                updateCustomerList();
+                renderCustomerList();
+                updateNewCustomerButton();
+                
+                showSuccess('Test verileri başarıyla oluşturuldu!');
+                
+            } catch (error) {
+                showError('Test verileri oluşturulamadı: ' + error.message);
+            }
+        }
+
+        // Override delete functions
+        async function deletePos(index) {
+            if (!confirm('Bu poz silinecek. Emin misiniz?')) return;
+            
+            const position = positions[index];
+            if (!position) return;
+            
+            try {
+                if (position._id) {
+                    await api.deletePosition(position._id);
+                }
+                
+                positions.splice(index, 1);
+                updatePosList();
+                showSuccess('Poz başarıyla silindi!');
+            } catch (error) {
+                showError('Poz silinemedi: ' + error.message);
+            }
+        }
 // GÜNCELLENMİŞ PDF OLUŞTURMA FONKSİYONU - MM ve ADET sütunları yer değiştirdi + Firma bilgileri eklendi
         const generateCalculationPDF = (calc) => {
             const { jsPDF } = window.jspdf;

login.html

@@ -0,0 +1,238 @@
+<!DOCTYPE html>
+<html lang="tr">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Pencere Ölçü Hesaplama - Giriş</title>
+    <script src="https://cdn.tailwindcss.com"></script>
+    <style>
+        body {
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            min-height: 100vh;
+        }
+        .login-container {
+            backdrop-filter: blur(10px);
+            background: rgba(255, 255, 255, 0.95);
+        }
+    </style>
+</head>
+<body>
+    <div class="min-h-screen flex items-center justify-center p-4">
+        <div class="login-container max-w-md w-full p-8 rounded-2xl shadow-2xl">
+            <div class="text-center mb-8">
+                <h1 class="text-3xl font-bold text-gray-800 mb-2">Pencere Ölçü Hesaplama</h1>
+                <p class="text-gray-600">Lütfen giriş yapın</p>
+            </div>
+
+            <form id="loginForm" class="space-y-6">
+                <div>
+                    <label class="block text-sm font-medium text-gray-700 mb-2">Kullanıcı Adı</label>
+                    <input type="text" id="username" required
+                           class="w-full px-4 py-3 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 focus:border-transparent"
+                           placeholder="Kullanıcı adınızı girin">
+                </div>
+
+                <div>
+                    <label class="block text-sm font-medium text-gray-700 mb-2">Şifre</label>
+                    <input type="password" id="password" required
+                           class="w-full px-4 py-3 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 focus:border-transparent"
+                           placeholder="Şifrenizi girin">
+                </div>
+
+                <button type="submit" id="loginBtn"
+                        class="w-full bg-purple-600 text-white py-3 rounded-lg font-medium hover:bg-purple-700 transition duration-200 flex items-center justify-center">
+                    <span id="loginText">Giriş Yap</span>
+                    <div id="loginSpinner" class="hidden animate-spin rounded-full h-5 w-5 border-b-2 border-white ml-2"></div>
+                </button>
+            </form>
+
+            <div class="mt-8 text-center">
+                <button onclick="showRegisterForm()" class="text-purple-600 hover:text-purple-800 text-sm">
+                    Hesabınız yok mu? Kayıt olun
+                </button>
+            </div>
+
+            <!-- Kayıt Formu (Başlangıçta gizli) -->
+            <form id="registerForm" class="hidden space-y-6">
+                <div>
+                    <label class="block text-sm font-medium text-gray-700 mb-2">Kullanıcı Adı</label>
+                    <input type="text" id="regUsername" required
+                           class="w-full px-4 py-3 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 focus:border-transparent"
+                           placeholder="Kullanıcı adınızı girin">
+                </div>
+
+                <div>
+                    <label class="block text-sm font-medium text-gray-700 mb-2">E-posta</label>
+                    <input type="email" id="regEmail" required
+                           class="w-full px-4 py-3 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 focus:border-transparent"
+                           placeholder="E-posta adresinizi girin">
+                </div>
+
+                <div>
+                    <label class="block text-sm font-medium text-gray-700 mb-2">Şifre</label>
+                    <input type="password" id="regPassword" required
+                           class="w-full px-4 py-3 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 focus:border-transparent"
+                           placeholder="Şifrenizi girin">
+                </div>
+
+                <button type="submit" id="registerBtn"
+                        class="w-full bg-green-600 text-white py-3 rounded-lg font-medium hover:bg-green-700 transition duration-200 flex items-center justify-center">
+                    <span id="registerText">Kayıt Ol</span>
+                    <div id="registerSpinner" class="hidden animate-spin rounded-full h-5 w-5 border-b-2 border-white ml-2"></div>
+                </button>
+
+                <button type="button" onclick="showLoginForm()" 
+                        class="w-full bg-gray-300 text-gray-700 py-3 rounded-lg font-medium hover:bg-gray-400 transition duration-200">
+                    Giriş formuna geri dön
+                </button>
+            </form>
+
+            <div id="errorMessage" class="hidden mt-4 p-3 bg-red-100 border border-red-400 text-red-700 rounded-lg">
+                <span id="errorText"></span>
+            </div>
+
+            <div id="successMessage" class="hidden mt-4 p-3 bg-green-100 border border-green-400 text-green-700 rounded-lg">
+                <span id="successText"></span>
+            </div>
+        </div>
+    </div>
+
+    <script src="api-client.js"></script>
+    <script>
+        // Form switching
+        function showRegisterForm() {
+            document.getElementById('loginForm').classList.add('hidden');
+            document.getElementById('registerForm').classList.remove('hidden');
+            document.getElementById('errorMessage').classList.add('hidden');
+            document.getElementById('successMessage').classList.add('hidden');
+        }
+
+        function showLoginForm() {
+            document.getElementById('registerForm').classList.add('hidden');
+            document.getElementById('loginForm').classList.remove('hidden');
+            document.getElementById('errorMessage').classList.add('hidden');
+            document.getElementById('successMessage').classList.add('hidden');
+        }
+
+        // Show error message
+        function showError(message) {
+            const errorDiv = document.getElementById('errorMessage');
+            const errorText = document.getElementById('errorText');
+            errorText.textContent = message;
+            errorDiv.classList.remove('hidden');
+            
+            setTimeout(() => {
+                errorDiv.classList.add('hidden');
+            }, 5000);
+        }
+
+        // Show success message
+        function showSuccess(message) {
+            const successDiv = document.getElementById('successMessage');
+            const successText = document.getElementById('successText');
+            successText.textContent = message;
+            successDiv.classList.remove('hidden');
+            
+            setTimeout(() => {
+                successDiv.classList.add('hidden');
+            }, 5000);
+        }
+
+        // Toggle loading state
+        function setLoading(buttonId, spinnerId, textId, loading = true) {
+            const button = document.getElementById(buttonId);
+            const spinner = document.getElementById(spinnerId);
+            const text = document.getElementById(textId);
+            
+            if (loading) {
+                button.disabled = true;
+                spinner.classList.remove('hidden');
+                text.textContent = 'İşleniyor...';
+            } else {
+                button.disabled = false;
+                spinner.classList.add('hidden');
+                
+                if (buttonId === 'loginBtn') {
+                    text.textContent = 'Giriş Yap';
+                } else if (buttonId === 'registerBtn') {
+                    text.textContent = 'Kayıt Ol';
+                }
+            }
+        }
+
+        // Login form submission
+        document.getElementById('loginForm').addEventListener('submit', async (e) => {
+            e.preventDefault();
+            
+            const username = document.getElementById('username').value.trim();
+            const password = document.getElementById('password').value;
+            
+            if (!username || !password) {
+                showError('Lütfen tüm alanları doldurun.');
+                return;
+            }
+
+            setLoading('loginBtn', 'loginSpinner', 'loginText', true);
+
+            try {
+                const result = await api.login(username, password);
+                showSuccess('Giriş başarılı! Yönlendiriliyorsunuz...');
+                
+                setTimeout(() => {
+                    window.location.href = '/index.html';
+                }, 1500);
+            } catch (error) {
+                showError(error.message || 'Giriş başarısız oldu. Lütfen tekrar deneyin.');
+            } finally {
+                setLoading('loginBtn', 'loginSpinner', 'loginText', false);
+            }
+        });
+
+        // Register form submission
+        document.getElementById('registerForm').addEventListener('submit', async (e) => {
+            e.preventDefault();
+            
+            const username = document.getElementById('regUsername').value.trim();
+            const email = document.getElementById('regEmail').value.trim();
+            const password = document.getElementById('regPassword').value;
+            
+            if (!username || !email || !password) {
+                showError('Lütfen tüm alanları doldurun.');
+                return;
+            }
+
+            if (password.length < 6) {
+                showError('Şifre en az 6 karakter olmalıdır.');
+                return;
+            }
+
+            setLoading('registerBtn', 'registerSpinner', 'registerText', true);
+
+            try {
+                await api.register({ username, email, password });
+                showSuccess('Kayıt başarılı! Lütfen giriş yapın.');
+                
+                // Clear form and switch to login
+                document.getElementById('regUsername').value = '';
+                document.getElementById('regEmail').value = '';
+                document.getElementById('regPassword').value = '';
+                
+                setTimeout(() => {
+                    showLoginForm();
+                }, 1500);
+            } catch (error) {
+                showError(error.message || 'Kayıt başarısız oldu. Lütfen tekrar deneyin.');
+            } finally {
+                setLoading('registerBtn', 'registerSpinner', 'registerText', false);
+            }
+        });
+
+        // Check if user is already logged in
+        document.addEventListener('DOMContentLoaded', () => {
+            if (api.isAuthenticated()) {
+                window.location.href = '/index.html';
+            }
+        });
+    </script>
+</body>
+</html>

package.json

@@ -0,0 +1,28 @@
+```json
+{
+  "name": "pencere-hesaplama-server",
+  "version": "1.0.0",
+  "description": "Pencere Ölçü Hesaplama Server",
+  "main": "server.js",
+  "scripts": {
+    "start": "node server.js",
+    "dev": "nodemon server.js",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": ["pencere", "hesaplama", "construction", "database"],
+  "author": "Your Name",
+  "license": "ISC",
+  "dependencies": {
+    "express": "^4.18.2",
+    "mongoose": "^7.5.0",
+    "cors": "^2.8.5",
+    "bcryptjs": "^2.4.3",
+    "jsonwebtoken": "^9.0.2",
+    "multer": "^1.4.5-lts.1",
+    "dotenv": "^16.3.1"
+  },
+  "devDependencies": {
+    "nodemon": "^3.0.1"
+  }
+}
+```

server.js

@@ -0,0 +1,617 @@
+const express = require('express');
+const mongoose = require('mongoose');
+const cors = require('cors');
+const bcrypt = require('bcryptjs');
+const jwt = require('jsonwebtoken');
+const multer = require('multer');
+const path = require('path');
+const fs = require('fs');
+require('dotenv').config();
+
+const app = express();
+const PORT = process.env.PORT || 3001;
+const JWT_SECRET = process.env.JWT_SECRET || 'your-secret-key-here';
+
+// Middleware
+app.use(cors());
+app.use(express.json({ limit: '50mb' }));
+app.use(express.urlencoded({ extended: true, limit: '50mb' }));
+
+// Serve static files
+app.use('/uploads', express.static(path.join(__dirname, 'uploads')));
+
+// Ensure uploads directory exists
+const uploadsDir = path.join(__dirname, 'uploads');
+if (!fs.existsSync(uploadsDir)) {
+    fs.mkdirSync(uploadsDir, { recursive: true });
+}
+
+// Multer configuration for file uploads
+const storage = multer.diskStorage({
+    destination: (req, file, cb) => {
+        cb(null, 'uploads/');
+    },
+    filename: (req, file, cb) => {
+        const uniqueSuffix = Date.now() + '-' + Math.round(Math.random() * 1E9);
+        cb(null, uniqueSuffix + path.extname(file.originalname));
+    }
+});
+
+const upload = multer({ 
+    storage: storage,
+    limits: { fileSize: 10 * 1024 * 1024 }, // 10MB limit
+    fileFilter: (req, file, cb) => {
+        if (file.mimetype.startsWith('image/')) {
+            cb(null, true);
+        } else {
+            cb(new Error('Only image files are allowed'));
+        }
+    }
+});
+
+// MongoDB Connection
+mongoose.connect(process.env.MONGODB_URI || 'mongodb://localhost:27017/pencere-hesaplama', {
+    useNewUrlParser: true,
+    useUnifiedTopology: true,
+}).then(() => {
+    console.log('Connected to MongoDB');
+}).catch(err => {
+    console.error('MongoDB connection error:', err);
+});
+
+// Schemas
+const userSchema = new mongoose.Schema({
+    username: { type: String, required: true, unique: true },
+    password: { type: String, required: true },
+    email: { type: String, required: true, unique: true },
+    role: { type: String, enum: ['admin', 'user'], default: 'user' },
+    createdAt: { type: Date, default: Date.now }
+});
+
+const companySchema = new mongoose.Schema({
+    name: { type: String, required: true },
+    logo: { type: String },
+    address: { type: String },
+    phone: { type: String },
+    email: { type: String },
+    website: { type: String },
+    description: { type: String },
+    createdAt: { type: Date, default: Date.now }
+});
+
+const systemSchema = new mongoose.Schema({
+    name: { type: String, required: true },
+    image: { type: String },
+    parts: [{
+        name: { type: String, required: true },
+        type: { type: String, enum: ['yatay', 'dikey', 'cam'], required: true },
+        quantity: { type: Number, required: true, default: 1 },
+        reduction: { type: Number, default: 0 },
+        description: { type: String },
+        image: { type: String },
+        advancedFormula: {
+            formula: { type: String },
+            type: { type: String }
+        },
+        glassFormulas: {
+            horizontal: { type: String },
+            horizontalType: { type: String },
+            vertical: { type: String },
+            verticalType: { type: String }
+        },
+        createdAt: { type: Date, default: Date.now }
+    }],
+    createdAt: { type: Date, default: Date.now },
+    updatedAt: { type: Date, default: Date.now }
+});
+
+const customerSchema = new mongoose.Schema({
+    name: { type: String, required: true, unique: true },
+    phone: { type: String },
+    email: { type: String },
+    address: { type: String },
+    createdAt: { type: Date, default: Date.now },
+    updatedAt: { type: Date, default: Date.now }
+});
+
+const positionSchema = new mongoose.Schema({
+    customerId: { type: mongoose.Schema.Types.ObjectId, ref: 'Customer', required: false },
+    projectId: { type: mongoose.Schema.Types.ObjectId, ref: 'Project' },
+    systemId: { type: mongoose.Schema.Types.ObjectId, ref: 'System', required: true },
+    projectName: { type: String },
+    width: { type: Number, required: true },
+    height: { type: Number, required: true },
+    quantity: { type: Number, required: true, default: 1 },
+    customerName: { type: String },
+    horizontalParts: [{
+        name: { type: String },
+        size: { type: Number },
+        quantity: { type: Number },
+        formulaUsed: { type: Boolean }
+    }],
+    verticalParts: [{
+        name: { type: String },
+        size: { type: Number },
+        quantity: { type: Number },
+        formulaUsed: { type: Boolean }
+    }],
+    glassParts: [{
+        name: { type: String },
+        quantity: { type: Number },
+        size: { type: String },
+        width: { type: Number },
+        height: { type: Number },
+        totalArea: { type: String }
+    }],
+    glassInfo: {
+        width: { type: Number },
+        height: { type: Number },
+        totalArea: { type: String }
+    },
+    pozNumber: { type: Number },
+    createdAt: { type: Date, default: Date.now },
+    updatedAt: { type: Date, default: Date.now }
+});
+
+const projectSchema = new mongoose.Schema({
+    name: { type: String, required: true },
+    customerId: { type: mongoose.Schema.Types.ObjectId, ref: 'Customer' },
+    description: { type: String },
+    startDate: { type: Date },
+    endDate: { type: Date },
+    status: { type: String, enum: ['active', 'completed', 'cancelled'], default: 'active' },
+    createdAt: { type: Date, default: Date.now },
+    updatedAt: { type: Date, default: Date.now }
+});
+
+const pdfSettingsSchema = new mongoose.Schema({
+    settings: { type: Object, required: true },
+    type: { type: String, enum: ['global', 'perpage'], required: true },
+    isActive: { type: Boolean, default: true },
+    createdAt: { type: Date, default: Date.now },
+    updatedAt: { type: Date, default: Date.now }
+});
+
+// Models
+const User = mongoose.model('User', userSchema);
+const Company = mongoose.model('Company', companySchema);
+const System = mongoose.model('System', systemSchema);
+const Customer = mongoose.model('Customer', customerSchema);
+const Position = mongoose.model('Position', positionSchema);
+const Project = mongoose.model('Project', projectSchema);
+const PDFSettings = mongoose.model('PDFSettings', pdfSettingsSchema);
+
+// Authentication Middleware
+const authenticateToken = (req, res, next) => {
+    const authHeader = req.headers['authorization'];
+    const token = authHeader && authHeader.split(' ')[1];
+
+    if (!token) {
+        return res.status(401).json({ error: 'Access token required' });
+    }
+
+    jwt.verify(token, JWT_SECRET, (err, user) => {
+        if (err) {
+            return res.status(403).json({ error: 'Invalid token' });
+        }
+        req.user = user;
+        next();
+    });
+};
+
+// Helper Functions
+const generatePozNumber = async (customerId = null) => {
+    const query = customerId ? { customerId } : { customerId: null };
+    const lastPosition = await Position.findOne(query).sort({ pozNumber: -1 });
+    return lastPosition ? lastPosition.pozNumber + 1 : 1;
+};
+
+// Auth Routes
+app.post('/api/auth/register', async (req, res) => {
+    try {
+        const { username, email, password } = req.body;
+
+        if (!username || !email || !password) {
+            return res.status(400).json({ error: 'All fields are required' });
+        }
+
+        const existingUser = await User.findOne({ 
+            $or: [{ username }, { email }] 
+        });
+
+        if (existingUser) {
+            return res.status(400).json({ error: 'Username or email already exists' });
+        }
+
+        const hashedPassword = await bcrypt.hash(password, 10);
+        const user = new User({ username, email, password: hashedPassword });
+        await user.save();
+
+        const token = jwt.sign(
+            { userId: user._id, username: user.username, role: user.role },
+            JWT_SECRET,
+            { expiresIn: '24h' }
+        );
+
+        res.status(201).json({
+            message: 'User created successfully',
+            token,
+            user: { id: user._id, username: user.username, email: user.email, role: user.role }
+        });
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.post('/api/auth/login', async (req, res) => {
+    try {
+        const { username, password } = req.body;
+
+        if (!username || !password) {
+            return res.status(400).json({ error: 'Username and password are required' });
+        }
+
+        const user = await User.findOne({ username });
+        if (!user) {
+            return res.status(401).json({ error: 'Invalid credentials' });
+        }
+
+        const isMatch = await bcrypt.compare(password, user.password);
+        if (!isMatch) {
+            return res.status(401).json({ error: 'Invalid credentials' });
+        }
+
+        const token = jwt.sign(
+            { userId: user._id, username: user.username, role: user.role },
+            JWT_SECRET,
+            { expiresIn: '24h' }
+        );
+
+        res.json({
+            message: 'Login successful',
+            token,
+            user: { id: user._id, username: user.username, email: user.email, role: user.role }
+        });
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+// Company Routes
+app.get('/api/company', async (req, res) => {
+    try {
+        let company = await Company.findOne();
+        if (!company) {
+            company = new Company({
+                name: 'Firma Adı',
+                createdAt: new Date()
+            });
+            await company.save();
+        }
+        res.json(company);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.put('/api/company', upload.single('logo'), async (req, res) => {
+    try {
+        const updateData = { ...req.body };
+        if (req.file) {
+            updateData.logo = `/uploads/${req.file.filename}`;
+        }
+        
+        const company = await Company.findOneAndUpdate(
+            {},
+            { $set: updateData, updatedAt: new Date() },
+            { new: true, upsert: true }
+        );
+        
+        res.json(company);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+// System Routes
+app.get('/api/systems', async (req, res) => {
+    try {
+        const systems = await System.find().sort({ createdAt: -1 });
+        res.json(systems);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.post('/api/systems', upload.single('image'), async (req, res) => {
+    try {
+        const systemData = { ...req.body };
+        if (req.file) {
+            systemData.image = `/uploads/${req.file.filename}`;
+        }
+        
+        const system = new System(systemData);
+        await system.save();
+        
+        res.status(201).json(system);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.put('/api/systems/:id', upload.single('image'), async (req, res) => {
+    try {
+        const updateData = { ...req.body, updatedAt: new Date() };
+        if (req.file) {
+            updateData.image = `/uploads/${req.file.filename}`;
+        }
+        
+        const system = await System.findByIdAndUpdate(
+            req.params.id,
+            updateData,
+            { new: true }
+        );
+        
+        if (!system) {
+            return res.status(404).json({ error: 'System not found' });
+        }
+        
+        res.json(system);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.delete('/api/systems/:id', async (req, res) => {
+    try {
+        const system = await System.findByIdAndDelete(req.params.id);
+        if (!system) {
+            return res.status(404).json({ error: 'System not found' });
+        }
+        
+        // Delete associated image file
+        if (system.image && fs.existsSync(path.join(__dirname, system.image))) {
+            fs.unlinkSync(path.join(__dirname, system.image));
+        }
+        
+        res.json({ message: 'System deleted successfully' });
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+// Customer Routes
+app.get('/api/customers', async (req, res) => {
+    try {
+        const customers = await Customer.find().sort({ name: 1 });
+        res.json(customers);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.post('/api/customers', async (req, res) => {
+    try {
+        const customer = new Customer(req.body);
+        await customer.save();
+        
+        res.status(201).json(customer);
+    } catch (error) {
+        if (error.code === 11000) {
+            res.status(400).json({ error: 'Customer name already exists' });
+        } else {
+            res.status(500).json({ error: error.message });
+        }
+    }
+});
+
+app.put('/api/customers/:id', async (req, res) => {
+    try {
+        const customer = await Customer.findByIdAndUpdate(
+            req.params.id,
+            { $set: req.body, updatedAt: new Date() },
+            { new: true }
+        );
+        
+        if (!customer) {
+            return res.status(404).json({ error: 'Customer not found' });
+        }
+        
+        res.json(customer);
+    } catch (error) {
+        if (error.code === 11000) {
+            res.status(400).json({ error: 'Customer name already exists' });
+        } else {
+            res.status(500).json({ error: error.message });
+        }
+    }
+});
+
+app.delete('/api/customers/:id', async (req, res) => {
+    try {
+        const customer = await Customer.findByIdAndDelete(req.params.id);
+        if (!customer) {
+            return res.status(404).json({ error: 'Customer not found' });
+        }
+        
+        // Delete associated positions
+        await Position.deleteMany({ customerId: req.params.id });
+        
+        res.json({ message: 'Customer deleted successfully' });
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+// Position Routes
+app.get('/api/positions', async (req, res) => {
+    try {
+        const { customerId } = req.query;
+        const query = customerId ? { customerId } : { customerId: null };
+        
+        const positions = await Position.find(query)
+            .populate('systemId', 'name image parts')
+            .sort({ createdAt: -1 });
+            
+        res.json(positions);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.post('/api/positions', async (req, res) => {
+    try {
+        const positionData = { ...req.body };
+        
+        if (!positionData.pozNumber) {
+            positionData.pozNumber = await generatePozNumber(positionData.customerId);
+        }
+        
+        const position = new Position(positionData);
+        await position.save();
+        
+        await position.populate('systemId', 'name image parts');
+        
+        res.status(201).json(position);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.put('/api/positions/:id', async (req, res) => {
+    try {
+        const position = await Position.findByIdAndUpdate(
+            req.params.id,
+            { $set: req.body, updatedAt: new Date() },
+            { new: true }
+        ).populate('systemId', 'name image parts');
+        
+        if (!position) {
+            return res.status(404).json({ error: 'Position not found' });
+        }
+        
+        res.json(position);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.delete('/api/positions/:id', async (req, res) => {
+    try {
+        const position = await Position.findByIdAndDelete(req.params.id);
+        if (!position) {
+            return res.status(404).json({ error: 'Position not found' });
+        }
+        
+        res.json({ message: 'Position deleted successfully' });
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+// PDF Settings Routes
+app.get('/api/pdf-settings', async (req, res) => {
+    try {
+        const { type } = req.query;
+        const query = type ? { type, isActive: true } : { isActive: true };
+        
+        const settings = await PDFSettings.findOne(query).sort({ createdAt: -1 });
+        res.json(settings || { settings: {} });
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.put('/api/pdf-settings', async (req, res) => {
+    try {
+        const { type = 'global', settings } = req.body;
+        
+        // Deactivate other settings of the same type
+        await PDFSettings.updateMany({ type }, { isActive: false });
+        
+        const pdfSettings = new PDFSettings({ type, settings, isActive: true });
+        await pdfSettings.save();
+        
+        res.status(201).json(pdfSettings);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+// Backup Routes
+app.get('/api/backup', async (req, res) => {
+    try {
+        const backup = {
+            timestamp: new Date().toISOString(),
+            systems: await System.find(),
+            customers: await Customer.find(),
+            positions: await Position.find(),
+            company: await Company.findOne(),
+            pdfSettings: await PDFSettings.find(),
+            projects: await Project.find()
+        };
+        
+        res.setHeader('Content-Type', 'application/json');
+        res.setHeader('Content-Disposition', `attachment; filename="backup-${new Date().toISOString().split('T')[0]}.json"`);
+        res.json(backup);
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+app.post('/api/restore', async (req, res) => {
+    try {
+        const backup = req.body;
+        
+        // Clear existing data
+        await Promise.all([
+            System.deleteMany({}),
+            Customer.deleteMany({}),
+            Position.deleteMany({}),
+            Company.deleteMany({}),
+            PDFSettings.deleteMany({}),
+            Project.deleteMany({})
+        ]);
+        
+        // Restore data
+        if (backup.systems && backup.systems.length > 0) {
+            await System.insertMany(backup.systems);
+        }
+        
+        if (backup.customers && backup.customers.length > 0) {
+            await Customer.insertMany(backup.customers);
+        }
+        
+        if (backup.positions && backup.positions.length > 0) {
+            await Position.insertMany(backup.positions);
+        }
+        
+        if (backup.company) {
+            await Company.create(backup.company);
+        }
+        
+        if (backup.pdfSettings && backup.pdfSettings.length > 0) {
+            await PDFSettings.insertMany(backup.pdfSettings);
+        }
+        
+        if (backup.projects && backup.projects.length > 0) {
+            await Project.insertMany(backup.projects);
+        }
+        
+        res.json({ message: 'Data restored successfully' });
+    } catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+
+// Error handling middleware
+app.use((err, req, res, next) => {
+    console.error(err.stack);
+    res.status(500).json({ error: 'Something went wrong!' });
+});
+
+// Start server
+app.listen(PORT, () => {
+    console.log(`Server is running on port ${PORT}`);
+    console.log(`API documentation: http://localhost:${PORT}/api`);
+});