Spaces:

kgmenu
/

Emir

Running

App Files Files Community

Kgshop commited on Mar 22, 2025

Commit

2a52994

verified ·

1 Parent(s): 702d490

Update app.py

Browse files

Files changed (1) hide show

app.py +459 -353

app.py CHANGED Viewed

@@ -11,7 +11,7 @@ from werkzeug.utils import secure_filename
 from werkzeug.security import generate_password_hash, check_password_hash
 app = Flask(__name__)
-app.secret_key = os.getenv("FLASK_SECRET_KEY", "your_default_secret_key")  # для session
 DATA_FILE = 'data_exmenu.json'
 USER_DATA_FILE = 'data_emirusers.json'
@@ -21,8 +21,9 @@ REPO_ID = "Kgshop/clients"
 HF_TOKEN_WRITE = os.getenv("HF_TOKEN")
 HF_TOKEN_READ = os.getenv("HF_TOKEN_READ")
 LOGO_URL = "https://huggingface.co/spaces/kgmenu/Example/resolve/main/emir_chaihana_14040103_125008071.jpg"
-ADMIN_LOGIN = "admin"
-ADMIN_PASSWORD = "admin"
 # Настройка логирования
 logging.basicConfig(level=logging.DEBUG)
@@ -249,6 +250,7 @@ def redeem_points_from_user(login, points_to_redeem):
             return False, "Недостаточно баллов для списания."
     return False, "Пользователь не найден."
 @app.route('/')
 def menu():
     data = load_data()
@@ -257,7 +259,6 @@ def menu():
     stoplist = data['stoplist']
     category_counts = get_category_counts(products)
-    # Удаляем просроченные записи из стоп-листа
     current_time = datetime.now()
     for product_id, stop_info in list(stoplist.items()):
         if stop_info['until'] <= current_time:
@@ -706,13 +707,6 @@ def menu():
                 text-align: center;
                 margin: 5px 0;
             }
-            .timer {
-                color: #ef4444;
-                font-weight: 500;
-                display: inline-block;
-                min-width: 60px; /* Чтобы текст не прыгал при обновлении */
-                text-align: center;
-            }
             .footer-info {
                 text-align: center;
                 margin-top: 20px;
@@ -777,6 +771,7 @@ def menu():
             .logout-button:hover {
                 background-color: #dc2626;
             }
         </style>
     </head>
     <body>
@@ -821,7 +816,7 @@ def menu():
                     <p class="product-description">{{ product['description'][:50] }}{% if product['description']|length > 50 %}...{% endif %}</p>
                     <div id="stop-status-{{ loop.index0 }}">
                         {% if stoplist[loop.index0|string] %}
-                        <p class="stop-notice" id="stop-timer-{{ loop.index0 }}">Извините, блюдо на стопе, будет готово через <span class="timer" data-until="{{ stoplist[loop.index0|string]['until'] }}"></span></p>
                         {% else %}
                         <button class="product-button" onclick="openModal({{ loop.index0 }})">Подробнее</button>
                         <button class="product-button add-to-cart" onclick="openOptionsModal({{ loop.index0 }})">В корзину</button>
@@ -977,6 +972,7 @@ def menu():
             </div>
         </div>
         <button id="cart-button" onclick="openCartModal()">🛒</button>
         <script src="https://code.jquery.com/jquery-3.5.1.min.js"></script>
@@ -1149,6 +1145,7 @@ def menu():
                 }
             }
             function orderViaWhatsApp() {
                 const cart = JSON.parse(localStorage.getItem('cart') || '[]');
                 if (cart.length === 0) {
@@ -1195,6 +1192,7 @@ def menu():
                 window.open(`https://api.whatsapp.com/send?phone=+996500131380&text=${orderText}`, '_blank');
             }
             function orderViaWhatsAppWithQR() {
                 const cart = JSON.parse(localStorage.getItem('cart') || '[]');
                 if (cart.length === 0) {
@@ -1224,7 +1222,7 @@ def menu():
                         }
                         total -= redeemedPoints;
                         orderText += `%0AСписано баллов: ${redeemedPoints} с`;
-                        $.post('/redeem_points', { points: redeemedPoints }, function(response) {
                             if (response.status === 'success') {
                                 availablePoints -= redeemedPoints;
                                 document.getElementById('availablePoints').textContent = availablePoints;
@@ -1294,17 +1292,14 @@ def menu():
             function startTimer(productId, until) {
                 const timerEl = document.querySelector(`#stop-timer-${productId} .timer`);
-                if (!timerEl) {
-                    console.error(`Таймер для productId ${productId} не найден`);
-                    return;
-                }
                 function updateTimer() {
                     const remaining = new Date(until) - new Date();
                     if (remaining > 0) {
                         const minutes = Math.floor(remaining / 60000);
                         const seconds = Math.floor((remaining % 60000) / 1000);
-                        timerEl.textContent = `${minutes}:${seconds < 10 ? '0' : ''}${seconds}`;
                     } else {
                         clearInterval(timerInterval);
                         const stopStatus = document.getElementById(`stop-status-${productId}`);
@@ -1313,23 +1308,6 @@ def menu():
                             <button class="product-button add-to-cart" onclick="openOptionsModal(${productId})">В корзину</button>
                         `;
                         delete stoplist[productId];
-                        // Отправляем запрос на сервер для удаления из стоп-листа
-                        $.ajax({
-                            url: '/stoplist',
-                            type: 'POST',
-                            data: {
-                                action: 'remove',
-                                product_id: productId
-                            },
-                            success: function(response) {
-                                if (response.status !== 'success') {
-                                    console.error('Ошибка при удалении из стоп-листа на сервере:', response);
-                                }
-                            },
-                            error: function() {
-                                console.error('Ошибка сервера при удалении из стоп-листа');
-                            }
-                        });
                     }
                 }
                 updateTimer();
@@ -1338,7 +1316,6 @@ def menu():
             // Запускаем таймеры только для активных стопов
             Object.entries(stoplist).forEach(([id, stopInfo]) => {
-                console.log(`Запуск таймера для productId ${id} с until=${stopInfo.until}`);
                 startTimer(id, stopInfo.until);
             });
@@ -1412,6 +1389,8 @@ def menu():
                     }
                 });
             });
         </script>
     </body>
     </html>
@@ -1473,27 +1452,17 @@ def stoplist():
     products = data['products']
     stoplist = data['stoplist']
-    # Удаляем просроченные записи из стоп-листа
-    current_time = datetime.now()
-    for product_id, stop_info in list(stoplist.items()):
-        if stop_info['until'] <= current_time:
-            del stoplist[product_id]
-    save_data(data)
     if request.method == 'POST':
         action = request.form.get('action')
         if action == 'add':
             product_id = request.form.get('product_id')
             minutes = int(request.form.get('minutes', 0))
             if minutes > 0:
-                # Сохраняем datetime в переменной до вызова save_data
-                until_datetime = datetime.now() + timedelta(minutes=minutes)
                 stoplist[product_id] = {
-                    'until': until_datetime
                 }
-                save_data(data)  # Это преобразует until в строку в stoplist
-                # Используем сохранённый until_datetime для ответа
-                return jsonify({'status': 'success', 'until': until_datetime.isoformat()})
             return jsonify({'status': 'error', 'message': 'Invalid minutes'}), 400
         elif action == 'remove':
             product_id = request.form.get('product_id')
@@ -1503,6 +1472,7 @@ def stoplist():
                 return jsonify({'status': 'success'})
             return jsonify({'status': 'error', 'message': 'Product not in stoplist'}), 404
     stoplist_for_template = {
         k: {'until': v['until'].isoformat() if isinstance(v['until'], datetime) else v['until']}
         for k, v in stoplist.items()
@@ -1568,9 +1538,6 @@ def stoplist():
             .timer {
                 color: #ef4444;
                 font-weight: 500;
-                display: inline-block;
-                min-width: 60px; /* Чтобы текст не прыгал при обновлении */
-                text-align: center;
             }
             .stop-notice {
                 color: #ef4444;
@@ -1594,7 +1561,7 @@ def stoplist():
                         <h3>{{ product['name'] }}</h3>
                         <div class="stop-status" id="stop-status-{{ loop.index0 }}">
                             {% if stoplist[loop.index0|string] %}
-                            <p class="stop-notice" id="stop-timer-{{ loop.index0 }}">Извините, блюдо на стопе, будет готово через <span class="timer" data-until="{{ stoplist[loop.index0|string]['until'] }}"></span></p>
                             {% else %}
                             <form class="stop-form" data-id="{{ loop.index0 }}">
                                 <button type="button" onclick="addToStoplist({{ loop.index0 }}, 30)">30 мин</button>
@@ -1628,20 +1595,22 @@ def stoplist():
                         if (response.status === 'success') {
                             stoplist[productId] = { until: response.until };
                             const stopStatus = document.getElementById(`stop-status-${productId}`);
-                            stopStatus.innerHTML = `<p class="stop-notice" id="stop-timer-${productId}">Извините, блюдо на стопе, будет готово через <span class="timer" data-until="${response.until}"></span></p>`;
                             let productItem = document.querySelector(`.product-item[data-id='${productId}']`);
                             let removeButton = document.createElement('button');
                             removeButton.className = 'remove-stop-button';
                             removeButton.textContent = 'Снять стоп';
                             removeButton.onclick = function() { removeFromStoplist(productId); };
                             productItem.appendChild(removeButton);
                             startTimer(productId, response.until);
                         } else {
-                            alert('Ошибка при добавлении в стоп-лист: ' + response.message);
                         }
                     },
                     error: function() {
-                        alert('Ошибка сервера при добавлении в стоп-лист');
                     }
                 });
             }
@@ -1671,54 +1640,61 @@ def stoplist():
                                 productItem.removeChild(removeButton);
                             }
                         } else {
-                            alert('Ошибка при удалении из стоп-листа: ' + response.message);
                         }
                     },
                     error: function() {
-                        alert('Ошибка сервера при удалении из стоп-листа');
                     }
                 });
             }
             function startTimer(productId, until) {
                 const timerEl = document.querySelector(`#stop-timer-${productId} .timer`);
-                if (!timerEl) {
-                    console.error(`Таймер для productId ${productId} не найден`);
-                    return;
-                }
                 function updateTimer() {
                     const remaining = new Date(until) - new Date();
                     if (remaining > 0) {
                         const minutes = Math.floor(remaining / 60000);
                         const seconds = Math.floor((remaining % 60000) / 1000);
-                        timerEl.textContent = `${minutes}:${seconds < 10 ? '0' : ''}${seconds}`;
                     } else {
                         clearInterval(timerInterval);
-                        removeFromStoplist(productId);
                     }
                 }
                 updateTimer();
                 const timerInterval = setInterval(updateTimer, 1000);
             }
-            // Запускаем таймеры для всех продуктов в стоп-листе
             Object.entries(stoplist).forEach(([id, stopInfo]) => {
-                console.log(`Запуск таймера для productId ${id} с until=${stopInfo.until}`);
                 startTimer(id, stopInfo.until);
             });
         </script>
     </body>
     </html>
     '''
-    return render_template_string(stoplist_html, products=products, stoplist=stoplist, stoplist_for_js=stoplist_for_js)
-# --- Admin Routes ---
 @app.route('/admin', methods=['GET', 'POST'])
 def admin():
-    if 'admin_login' not in session:
-        return redirect(url_for('admin_login'))
     data = load_data()
     products = data['products']
     categories = data['categories']
@@ -1732,22 +1708,22 @@ def admin():
             if category_name and category_name not in categories:
                 categories.append(category_name)
                 save_data(data)
-            return redirect(url_for('admin'))
         elif action == 'delete_category':
             category_index = int(request.form.get('category_index'))
-            category_to_delete = categories[category_index]
-            del categories[category_index]
-            # Обновляем категорию у продуктов
             for product in products:
-                if product.get('category') == category_to_delete:
                     product['category'] = 'Без категории'
             save_data(data)
             return redirect(url_for('admin'))
         elif action == 'add':
             name = request.form.get('name')
-            price = float(request.form.get('price').replace(',', '.'))
             description = request.form.get('description')
             category = request.form.get('category')
             photos_files = request.files.getlist('photos')
@@ -1756,7 +1732,6 @@ def admin():
             photos_list = []
             options_list = []
-            # Обрабатываем фотографии
             if photos_files:
                 for photo in photos_files[:10]:
                     if photo and photo.filename:
@@ -1778,7 +1753,6 @@ def admin():
                         if os.path.exists(temp_path):
                             os.remove(temp_path)
-            # Обрабатываем опции
             for opt_name, opt_price in zip(option_names, option_prices):
                 if opt_name and opt_price:
                     options_list.append({
@@ -1786,6 +1760,10 @@ def admin():
                         'price': float(opt_price.replace(',', '.'))
                     })
             new_product = {
                 'name': name,
                 'price': price,
@@ -1799,19 +1777,18 @@ def admin():
             return redirect(url_for('admin'))
         elif action == 'edit':
-            product_index = int(request.form.get('product_index'))
             name = request.form.get('name')
-            price = float(request.form.get('price').replace(',', '.'))
             description = request.form.get('description')
             category = request.form.get('category')
             photos_files = request.files.getlist('photos')
             option_names = request.form.getlist('option_names')
             option_prices = request.form.getlist('option_prices')
-            photos_list = request.form.getlist('existing_photos')  # Существующие фото
-            options_list = []
-            # Обрабатываем новые фотографии
-            if photos_files:
                 for photo in photos_files[:10]:
                     if photo and photo.filename:
                         photo_filename = secure_filename(photo.filename)
@@ -1826,13 +1803,14 @@ def admin():
                             repo_id=REPO_ID,
                             repo_type="dataset",
                             token=HF_TOKEN_WRITE,
-                            commit_message=f"Добавлено фото для блюда {name}"
                         )
-                        photos_list.append(photo_filename)
                         if os.path.exists(temp_path):
                             os.remove(temp_path)
-            # Обрабатываем опции
             for opt_name, opt_price in zip(option_names, option_prices):
                 if opt_name and opt_price:
                     options_list.append({
@@ -1840,38 +1818,24 @@ def admin():
                         'price': float(opt_price.replace(',', '.'))
                     })
-            products[product_index].update({
-                'name': name,
-                'price': price,
-                'description': description,
-                'category': category if category in categories else 'Без категории',
-                'photos': photos_list,
-                'options': options_list
-            })
             save_data(data)
             return redirect(url_for('admin'))
         elif action == 'delete':
-            product_index = int(request.form.get('product_index'))
-            products.pop(product_index)
-            # Удаляем продукт из стоп-листа, если он там есть
-            product_id = str(product_index)
-            if product_id in stoplist:
-                del stoplist[product_id]
-            # Обновляем индексы в стоп-листе
-            new_stoplist = {}
-            for pid, stop_info in stoplist.items():
-                pid_int = int(pid)
-                if pid_int > product_index:
-                    new_stoplist[str(pid_int - 1)] = stop_info
-                elif pid_int < product_index:
-                    new_stoplist[pid] = stop_info
-            data['stoplist'] = new_stoplist
             save_data(data)
             return redirect(url_for('admin'))
-        elif action == 'upload_qr':
-            qr_file = request.files.get('qr_file')
             if qr_file and qr_file.filename:
                 qr_filename = secure_filename(qr_file.filename)
                 uploads_dir = 'uploads'
@@ -1885,13 +1849,18 @@ def admin():
                     repo_id=REPO_ID,
                     repo_type="dataset",
                     token=HF_TOKEN_WRITE,
-                    commit_message="Добавлен QR-код для оплаты"
                 )
                 data['qr_code'] = qr_filename
                 save_data(data)
                 if os.path.exists(temp_path):
                     os.remove(temp_path)
-                return redirect(url_for('admin'))
     admin_html = '''
     <!DOCTYPE html>
@@ -1912,98 +1881,159 @@ def admin():
                 max-width: 1200px;
                 margin: 0 auto;
             }
             h1, h2 {
                 font-weight: 600;
                 margin-bottom: 20px;
             }
-            .form-section, .category-section, .product-section {
                 background: #fff;
                 padding: 20px;
                 border-radius: 15px;
                 box-shadow: 0 4px 15px rgba(0,0,0,0.1);
-                margin-bottom: 20px;
             }
             label {
                 display: block;
-                margin: 10px 0 5px;
             }
-            input, select, textarea {
                 width: 100%;
-                padding: 10px;
-                margin-bottom: 10px;
                 border: 1px solid #e2e8f0;
                 border-radius: 8px;
                 font-size: 1rem;
             }
             button {
-                padding: 10px 20px;
                 border: none;
                 border-radius: 8px;
                 background-color: #3b82f6;
                 color: white;
                 cursor: pointer;
-                margin: 5px;
             }
             button:hover {
                 background-color: #2563eb;
             }
             .delete-button {
                 background-color: #ef4444;
             }
             .delete-button:hover {
                 background-color: #dc2626;
             }
-            .category-item, .product-item {
-                display: flex;
-                justify-content: space-between;
-                align-items: center;
-                padding: 10px;
-                border-bottom: 1px solid #e2e8f0;
             }
-            .option-field {
                 display: flex;
                 gap: 10px;
-                margin-bottom: 10px;
             }
-            .option-field input {
-                flex: 1;
             }
         </style>
     </head>
     <body>
         <div class="container">
-            <h1>Админ-панель</h1>
-            <!-- Управление QR-кодом -->
-            <div class="form-section">
-                <h2>Управление QR-кодом для оплаты</h2>
-                <form method="POST" enctype="multipart/form-data">
-                    <input type="hidden" name="action" value="upload_qr">
-                    <label for="qr_file">Загрузить QR-код:</label>
-                    <input type="file" name="qr_file" id="qr_file" accept="image/*">
-                    <button type="submit">Загрузить</button>
-                </form>
-                {% if qr_code %}
-                <p>Текущий QR-код: <a href="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ qr_code }}" target="_blank">Просмотреть</a></p>
-                {% else %}
-                <p>QR-код не установлен</p>
-                {% endif %}
             </div>
-            <!-- Управление категориями -->
-            <div class="category-section">
-                <h2>Управление категориями</h2>
-                <form method="POST">
-                    <input type="hidden" name="action" value="add_category">
-                    <label for="category_name">Новая категория:</label>
-                    <input type="text" name="category_name" id="category_name" required>
-                    <button type="submit">Добавить категорию</button>
-                </form>
-                <h3>Существующие категории:</h3>
                 {% for category in categories %}
                 <div class="category-item">
-                    <span>{{ category }}</span>
-                    <form method="POST" style="display:inline;">
                         <input type="hidden" name="action" value="delete_category">
                         <input type="hidden" name="category_index" value="{{ loop.index0 }}">
                         <button type="submit" class="delete-button">Удалить</button>
@@ -2012,222 +2042,294 @@ def admin():
                 {% endfor %}
             </div>
-            <!-- Добавление блюда -->
-            <div class="form-section">
-                <h2>Добавить блюдо</h2>
-                <form method="POST" enctype="multipart/form-data">
-                    <input type="hidden" name="action" value="add">
-                    <label for="name">Название:</label>
-                    <input type="text" name="name" id="name" required>
-                    <label for="price">Цена:</label>
-                    <input type="text" name="price" id="price" required>
-                    <label for="description">Описание:</label>
-                    <textarea name="description" id="description" required></textarea>
-                    <label for="category">Категория:</label>
-                    <select name="category" id="category">
-                        <option value="Без категории">Без категории</option>
-                        {% for category in categories %}
-                        <option value="{{ category }}">{{ category }}</option>
-                        {% endfor %}
-                    </select>
-                    <label for="photos">Фотографии:</label>
-                    <input type="file" name="photos" id="photos" multiple accept="image/*">
-                    <div id="options-container">
-                        <h3>Дополнительные опции</h3>
-                        <div class="option-field">
-                            <input type="text" name="option_names" placeholder="Название опции">
-                            <input type="text" name="option_prices" placeholder="Цена опции">
-                        </div>
-                    </div>
-                    <button type="button" onclick="addOptionField()">Добавить опцию</button>
-                    <button type="submit">Добавить блюдо</button>
-                </form>
-            </div>
-            <!-- Список блюд -->
-            <div class="product-section">
-                <h2>Список блюд</h2>
                 {% for product in products %}
                 <div class="product-item">
-                    <div>
-                        <strong>{{ product['name'] }}</strong> - {{ product['price'] }} с ({{ product.get('category', 'Без категории') }})
-                    </div>
-                    <div>
-                        <button onclick="editProduct({{ loop.index0 }})">Редактировать</button>
-                        <form method="POST" style="display:inline;">
-                            <input type="hidden" name="action" value="delete">
-                            <input type="hidden" name="product_index" value="{{ loop.index0 }}">
-                            <button type="submit" class="delete-button">Удалить</button>
-                        </form>
-                    </div>
-                </div>
-                <div id="edit-form-{{ loop.index0 }}" style="display:none;">
-                    <form method="POST" enctype="multipart/form-data">
-                        <input type="hidden" name="action" value="edit">
-                        <input type="hidden" name="product_index" value="{{ loop.index0 }}">
-                        <label for="name-{{ loop.index0 }}">Название:</label>
-                        <input type="text" name="name" id="name-{{ loop.index0 }}" value="{{ product['name'] }}" required>
-                        <label for="price-{{ loop.index0 }}">Цена:</label>
-                        <input type="text" name="price" id="price-{{ loop.index0 }}" value="{{ product['price'] }}" required>
-                        <label for="description-{{ loop.index0 }}">Описание:</label>
-                        <textarea name="description" id="description-{{ loop.index0 }}" required>{{ product['description'] }}</textarea>
-                        <label for="category-{{ loop.index0 }}">Категория:</label>
-                        <select name="category" id="category-{{ loop.index0 }}">
-                            <option value="Без категории" {% if product.get('category', 'Без категории') == 'Без категории' %}selected{% endif %}>Без категории</option>
-                            {% for category in categories %}
-                            <option value="{{ category }}" {% if product.get('category') == category %}selected{% endif %}>{{ category }}</option>
-                            {% endfor %}
-                        </select>
-                        <label>Текущие фотографии:</label>
-                        {% for photo in product.get('photos', []) %}
-                        <div>
-                            <input type="checkbox" name="existing_photos" value="{{ photo }}" checked>
-                            <a href="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/photos/{{ photo }}" target="_blank">{{ photo }}</a>
-                        </div>
                         {% endfor %}
-                        <label for="photos-{{ loop.index0 }}">Добавить новые фотографии:</label>
-                        <input type="file" name="photos" id="photos-{{ loop.index0 }}" multiple accept="image/*">
-                        <div id="edit-options-container-{{ loop.index0 }}">
-                            <h3>Дополнительные опции</h3>
-                            {% for option in product.get('options', []) %}
-                            <div class="option-field">
-                                <input type="text" name="option_names" value="{{ option['name'] }}" placeholder="Название опции">
-                                <input type="text" name="option_prices" value="{{ option['price'] }}" placeholder="Цена опции">
                             </div>
-                            {% endfor %}
-                        </div>
-                        <button type="button" onclick="addEditOptionField({{ loop.index0 }})">Добавить опцию</button>
-                        <button type="submit">Сохранить изменения</button>
                     </form>
                 </div>
                 {% endfor %}
             </div>
         </div>
         <script>
-            function addOptionField() {
-                const container = document.getElementById('options-container');
-                const newField = document.createElement('div');
-                newField.className = 'option-field';
-                newField.innerHTML = `
                     <input type="text" name="option_names" placeholder="Название опции">
-                    <input type="text" name="option_prices" placeholder="Цена опции">
                 `;
-                container.appendChild(newField);
             }
-            function addEditOptionField(index) {
-                const container = document.getElementById(`edit-options-container-${index}`);
-                const newField = document.createElement('div');
-                newField.className = 'option-field';
-                newField.innerHTML = `
-                    <input type="text" name="option_names" placeholder="Название опции">
-                    <input type="text" name="option_prices" placeholder="Цена опции">
-                `;
-                container.appendChild(newField);
             }
-            function editProduct(index) {
-                const form = document.getElementById(`edit-form-${index}`);
-                form.style.display = form.style.display === 'none' ? 'block' : 'none';
             }
         </script>
     </body>
     </html>
     '''
-    return render_template_string(admin_html, products=products, categories=categories, repo_id=REPO_ID, qr_code=data['qr_code'])
 @app.route('/admin_login', methods=['GET', 'POST'])
 def admin_login():
     if request.method == 'POST':
         login = request.form.get('login')
         password = request.form.get('password')
         if login == ADMIN_LOGIN and password == ADMIN_PASSWORD:
-            session['admin_login'] = login
             return redirect(url_for('admin'))
-        return "Неверный логин или пароль", 401
-    login_html = '''
-    <!DOCTYPE html>
-    <html lang="ru">
-    <head>
-        <meta charset="UTF-8">
-        <meta name="viewport" content="width=device-width, initial-scale=1.0">
-        <title>Вход в админ-панель</title>
-        <link href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;600&display=swap" rel="stylesheet">
-        <style>
-            body {
-                font-family: 'Poppins', sans-serif;
-                background: linear-gradient(135deg, #f0f2f5, #e9ecef);
-                color: #2d3748;
-                padding: 20px;
-                display: flex;
-                justify-content: center;
-                align-items: center;
-                height: 100vh;
-                margin: 0;
-            }
-            .login-container {
-                background: #fff;
-                padding: 30px;
-                border-radius: 15px;
-                box-shadow: 0 4px 15px rgba(0,0,0,0.1);
-                width: 100%;
-                max-width: 400px;
-            }
-            h2 {
-                font-weight: 600;
-                margin-bottom: 20px;
-                text-align: center;
-            }
-            label {
-                display: block;
-                margin: 10px 0 5px;
-            }
-            input {
-                width: 100%;
-                padding: 10px;
-                margin-bottom: 15px;
-                border: 1px solid #e2e8f0;
-                border-radius: 8px;
-                font-size: 1rem;
-            }
-            button {
-                width: 100%;
-                padding: 10px;
-                border: none;
-                border-radius: 8px;
-                background-color: #3b82f6;
-                color: white;
-                font-size: 1rem;
-                cursor: pointer;
-            }
-            button:hover {
-                background-color: #2563eb;
-            }
-        </style>
-    </head>
-    <body>
-        <div class="login-container">
-            <h2>Вход в админ-панель</h2>
-            <form method="POST">
-                <label for="login">Логин:</label>
-                <input type="text" name="login" id="login" required>
-                <label for="password">Пароль:</label>
-                <input type="password" name="password" id="password" required>
-                <button type="submit">Войти</button>
-            </form>
-        </div>
-    </body>
-    </html>
-    '''
-    return render_template_string(login_html)
-@app.route('/admin_logout')
 def admin_logout():
-    session.pop('admin_login', None)
     return redirect(url_for('admin_login'))
-# --- User Authentication Routes ---
 @app.route('/register', methods=['POST'])
 def register():
     login = request.form.get('registerLogin')
@@ -2240,13 +2342,13 @@ def register():
     return jsonify({'status': 'error', 'message': message}), 400
 @app.route('/login', methods=['POST'])
-def login():
     login = request.form.get('loginUsername')
     password = request.form.get('loginPassword')
     user = authenticate_user(login, password)
     if user:
         session['user_login'] = login
-        return jsonify({'status': 'success', 'message': 'Вход успешен'})
     return jsonify({'status': 'error', 'message': 'Неверный логин или пароль'}), 401
 @app.route('/logout')
@@ -2255,9 +2357,9 @@ def logout():
     return redirect(url_for('menu'))
 @app.route('/update_profile', methods=['POST'])
-def update_profile():
     if 'user_login' not in session:
-        return jsonify({'status': 'error', 'message': 'Не авторизован'}), 401
     login = session['user_login']
     phone = request.form.get('editPhone')
     address = request.form.get('editAddress')
@@ -2269,17 +2371,21 @@ def update_profile():
 @app.route('/redeem_points', methods=['POST'])
 def redeem_points():
     if 'user_login' not in session:
-        return jsonify({'status': 'error', 'message': 'Не авторизован'}), 401
     login = session['user_login']
     points_to_redeem = int(request.form.get('points', 0))
     success, message = redeem_points_from_user(login, points_to_redeem)
     if success:
-        return jsonify({'status': 'success', 'message': 'Баллы списаны'})
-    return jsonify({'status': 'error', 'message': message}), 400
-# Запуск периодического резервного копирования в отдельном потоке
-backup_thread = threading.Thread(target=periodic_backup, daemon=True)
-backup_thread.start()
 if __name__ == '__main__':
     app.run(debug=True, host='0.0.0.0', port=7860)

 from werkzeug.security import generate_password_hash, check_password_hash
 app = Flask(__name__)
+app.secret_key = os.getenv("FLASK_SECRET_KEY", "your_default_secret_key") # для session
 DATA_FILE = 'data_exmenu.json'
 USER_DATA_FILE = 'data_emirusers.json'
 HF_TOKEN_WRITE = os.getenv("HF_TOKEN")
 HF_TOKEN_READ = os.getenv("HF_TOKEN_READ")
 LOGO_URL = "https://huggingface.co/spaces/kgmenu/Example/resolve/main/emir_chaihana_14040103_125008071.jpg"
+ADMIN_LOGIN = os.getenv("ADMIN_LOGIN", "admin")
+ADMIN_PASSWORD = os.getenv("ADMIN_PASSWORD", "admin_password")
 # Настройка логирования
 logging.basicConfig(level=logging.DEBUG)
             return False, "Недостаточно баллов для списания."
     return False, "Пользователь не найден."
 @app.route('/')
 def menu():
     data = load_data()
     stoplist = data['stoplist']
     category_counts = get_category_counts(products)
     current_time = datetime.now()
     for product_id, stop_info in list(stoplist.items()):
         if stop_info['until'] <= current_time:
                 text-align: center;
                 margin: 5px 0;
             }
             .footer-info {
                 text-align: center;
                 margin-top: 20px;
             .logout-button:hover {
                 background-color: #dc2626;
             }
         </style>
     </head>
     <body>
                     <p class="product-description">{{ product['description'][:50] }}{% if product['description']|length > 50 %}...{% endif %}</p>
                     <div id="stop-status-{{ loop.index0 }}">
                         {% if stoplist[loop.index0|string] %}
+                        <p class="stop-notice" id="stop-timer-{{ loop.index0 }}">Извините, блюдо на стопе, будет готово в течении <span class="timer" data-until="{{ stoplist[loop.index0|string]['until'] }}"></span></p>
                         {% else %}
                         <button class="product-button" onclick="openModal({{ loop.index0 }})">Подробнее</button>
                         <button class="product-button add-to-cart" onclick="openOptionsModal({{ loop.index0 }})">В корзину</button>
             </div>
         </div>
         <button id="cart-button" onclick="openCartModal()">🛒</button>
         <script src="https://code.jquery.com/jquery-3.5.1.min.js"></script>
                 }
             }
             function orderViaWhatsApp() {
                 const cart = JSON.parse(localStorage.getItem('cart') || '[]');
                 if (cart.length === 0) {
                 window.open(`https://api.whatsapp.com/send?phone=+996500131380&text=${orderText}`, '_blank');
             }
             function orderViaWhatsAppWithQR() {
                 const cart = JSON.parse(localStorage.getItem('cart') || '[]');
                 if (cart.length === 0) {
                         }
                         total -= redeemedPoints;
                         orderText += `%0AСписано баллов: ${redeemedPoints} с`;
+                         $.post('/redeem_points', { points: redeemedPoints }, function(response) {
                             if (response.status === 'success') {
                                 availablePoints -= redeemedPoints;
                                 document.getElementById('availablePoints').textContent = availablePoints;
             function startTimer(productId, until) {
                 const timerEl = document.querySelector(`#stop-timer-${productId} .timer`);
+                if (!timerEl) return;
                 function updateTimer() {
                     const remaining = new Date(until) - new Date();
                     if (remaining > 0) {
                         const minutes = Math.floor(remaining / 60000);
                         const seconds = Math.floor((remaining % 60000) / 1000);
+                        timerEl.textContent = `в течении ${minutes} минут`; // Modified timer text
                     } else {
                         clearInterval(timerInterval);
                         const stopStatus = document.getElementById(`stop-status-${productId}`);
                             <button class="product-button add-to-cart" onclick="openOptionsModal(${productId})">В корзину</button>
                         `;
                         delete stoplist[productId];
                     }
                 }
                 updateTimer();
             // Запускаем таймеры только для активных стопов
             Object.entries(stoplist).forEach(([id, stopInfo]) => {
                 startTimer(id, stopInfo.until);
             });
                     }
                 });
             });
         </script>
     </body>
     </html>
     products = data['products']
     stoplist = data['stoplist']
     if request.method == 'POST':
         action = request.form.get('action')
         if action == 'add':
             product_id = request.form.get('product_id')
             minutes = int(request.form.get('minutes', 0))
             if minutes > 0:
                 stoplist[product_id] = {
+                    'until': datetime.now() + timedelta(minutes=minutes)
                 }
+                save_data(data)
+                return jsonify({'status': 'success', 'until': stoplist[product_id]['until'].isoformat()})
             return jsonify({'status': 'error', 'message': 'Invalid minutes'}), 400
         elif action == 'remove':
             product_id = request.form.get('product_id')
                 return jsonify({'status': 'success'})
             return jsonify({'status': 'error', 'message': 'Product not in stoplist'}), 404
     stoplist_for_template = {
         k: {'until': v['until'].isoformat() if isinstance(v['until'], datetime) else v['until']}
         for k, v in stoplist.items()
             .timer {
                 color: #ef4444;
                 font-weight: 500;
             }
             .stop-notice {
                 color: #ef4444;
                         <h3>{{ product['name'] }}</h3>
                         <div class="stop-status" id="stop-status-{{ loop.index0 }}">
                             {% if stoplist[loop.index0|string] %}
+                            <p class="stop-notice" id="stop-timer-{{ loop.index0 }}">Извините, блюдо на стопе, будет готово в течении <span class="timer" data-until="{{ stoplist[loop.index0|string]['until'] }}"></span></p>
                             {% else %}
                             <form class="stop-form" data-id="{{ loop.index0 }}">
                                 <button type="button" onclick="addToStoplist({{ loop.index0 }}, 30)">30 мин</button>
                         if (response.status === 'success') {
                             stoplist[productId] = { until: response.until };
                             const stopStatus = document.getElementById(`stop-status-${productId}`);
+                            stopStatus.innerHTML = `<p class="stop-notice" id="stop-timer-${productId}">Извините, блюдо на стопе, будет готово в течении <span class="timer" data-until="${response.until}"></span></p>`;
                             let productItem = document.querySelector(`.product-item[data-id='${productId}']`);
                             let removeButton = document.createElement('button');
                             removeButton.className = 'remove-stop-button';
                             removeButton.textContent = 'Снять стоп';
                             removeButton.onclick = function() { removeFromStoplist(productId); };
                             productItem.appendChild(removeButton);
                             startTimer(productId, response.until);
                         } else {
+                            alert('Ошибка при добавлении в стоп-лист');
                         }
                     },
                     error: function() {
+                        alert('Ошибка сервера');
                     }
                 });
             }
                                 productItem.removeChild(removeButton);
                             }
                         } else {
+                            alert('Ошибка при снятии стоп-листа');
                         }
                     },
                     error: function() {
+                        alert('Ошибка сервера');
                     }
                 });
             }
             function startTimer(productId, until) {
                 const timerEl = document.querySelector(`#stop-timer-${productId} .timer`);
+                if (!timerEl) return;
                 function updateTimer() {
                     const remaining = new Date(until) - new Date();
                     if (remaining > 0) {
                         const minutes = Math.floor(remaining / 60000);
                         const seconds = Math.floor((remaining % 60000) / 1000);
+                        timerEl.textContent = `в течении ${minutes} минут`; // Modified timer text
                     } else {
                         clearInterval(timerInterval);
+                        const stopStatus = document.getElementById(`stop-status-${productId}`);
+                        stopStatus.innerHTML = `
+                            <form class="stop-form" data-id="${productId}">
+                                <button type="button" onclick="addToStoplist(${productId}, 30)">30 мин</button>
+                                <button type="button" onclick="addToStoplist(${productId}, 60)">60 мин</button>
+                                <button type="button" onclick="addToStoplist(${productId}, 90)">90 мин</button>
+                            </form>
+                        `;
+                        let productItem = document.querySelector(`.product-item[data-id='${productId}']`);
+                            let removeButton = productItem.querySelector('.remove-stop-button');
+                            if (removeButton) {
+                                productItem.removeChild(removeButton);
+                            }
+                        delete stoplist[productId];
                     }
                 }
                 updateTimer();
                 const timerInterval = setInterval(updateTimer, 1000);
             }
+            // Запускаем таймеры только для активных стопов
             Object.entries(stoplist).forEach(([id, stopInfo]) => {
                 startTimer(id, stopInfo.until);
             });
         </script>
     </body>
     </html>
     '''
+    return render_template_string(stoplist_html, products=products, stoplist=stoplist_for_template, stoplist_for_js=stoplist_for_js)
 @app.route('/admin', methods=['GET', 'POST'])
 def admin():
+    # No login required for /admin route as per user request
     data = load_data()
     products = data['products']
     categories = data['categories']
             if category_name and category_name not in categories:
                 categories.append(category_name)
                 save_data(data)
+                return redirect(url_for('admin'))
+            return "Ошибка: Категория уже существует или не указано название", 400
         elif action == 'delete_category':
             category_index = int(request.form.get('category_index'))
+            deleted_category = categories.pop(category_index)
             for product in products:
+                if product.get('category') == deleted_category:
                     product['category'] = 'Без категории'
             save_data(data)
             return redirect(url_for('admin'))
         elif action == 'add':
+            # ... (rest of the 'add' action logic is the same) ...
             name = request.form.get('name')
+            price = request.form.get('price')
             description = request.form.get('description')
             category = request.form.get('category')
             photos_files = request.files.getlist('photos')
             photos_list = []
             options_list = []
             if photos_files:
                 for photo in photos_files[:10]:
                     if photo and photo.filename:
                         if os.path.exists(temp_path):
                             os.remove(temp_path)
             for opt_name, opt_price in zip(option_names, option_prices):
                 if opt_name and opt_price:
                     options_list.append({
                         'price': float(opt_price.replace(',', '.'))
                     })
+            if not name or not price or not description:
+                return "Ошибка: Заполните все обязательные поля", 400
+            price = float(price.replace(',', '.'))
             new_product = {
                 'name': name,
                 'price': price,
             return redirect(url_for('admin'))
         elif action == 'edit':
+            # ... (rest of the 'edit' action logic is the same) ...
+            index = int(request.form.get('index'))
             name = request.form.get('name')
+            price = request.form.get('price')
             description = request.form.get('description')
             category = request.form.get('category')
             photos_files = request.files.getlist('photos')
             option_names = request.form.getlist('option_names')
             option_prices = request.form.getlist('option_prices')
+            if photos_files and any(photo.filename for photo in photos_files):
+                new_photos_list = []
                 for photo in photos_files[:10]:
                     if photo and photo.filename:
                         photo_filename = secure_filename(photo.filename)
                             repo_id=REPO_ID,
                             repo_type="dataset",
                             token=HF_TOKEN_WRITE,
+                            commit_message=f"Обновлено фото для блюда {name}"
                         )
+                        new_photos_list.append(photo_filename)
                         if os.path.exists(temp_path):
                             os.remove(temp_path)
+                products[index]['photos'] = new_photos_list
+            options_list = []
             for opt_name, opt_price in zip(option_names, option_prices):
                 if opt_name and opt_price:
                     options_list.append({
                         'price': float(opt_price.replace(',', '.'))
                     })
+            products[index]['name'] = name
+            products[index]['price'] = float(price.replace(',', '.'))
+            products[index]['description'] = description
+            products[index]['category'] = category if category in categories else 'Без категории'
+            products[index]['options'] = options_list
             save_data(data)
             return redirect(url_for('admin'))
         elif action == 'delete':
+            index = int(request.form.get('index'))
+            del products[index]
+            if str(index) in stoplist:
+                del stoplist[str(index)]
             save_data(data)
             return redirect(url_for('admin'))
+        elif action == 'update_qr':
+            qr_file = request.files.get('qr_code')
             if qr_file and qr_file.filename:
                 qr_filename = secure_filename(qr_file.filename)
                 uploads_dir = 'uploads'
                     repo_id=REPO_ID,
                     repo_type="dataset",
                     token=HF_TOKEN_WRITE,
+                    commit_message="Обновлен QR-код"
                 )
                 data['qr_code'] = qr_filename
                 save_data(data)
                 if os.path.exists(temp_path):
                     os.remove(temp_path)
+            return redirect(url_for('admin'))
+    stoplist_for_template = {
+        k: {'until': v['until'].isoformat() if isinstance(v['until'], datetime) else v['until']}
+        for k, v in stoplist.items()
+    }
     admin_html = '''
     <!DOCTYPE html>
                 max-width: 1200px;
                 margin: 0 auto;
             }
+            .header {
+                display: flex;
+                align-items: center;
+                padding: 15px 0;
+                border-bottom: 1px solid #e2e8f0;
+            }
+            .header-logo {
+                width: 60px;
+                height: 60px;
+                border-radius: 50%;
+                object-fit: cover;
+                box-shadow: 0 4px 15px rgba(0, 0, 0, 0.2);
+                transition: transform 0.3s ease, box-shadow 0.3s ease;
+                margin-right: 15px;
+            }
+            .header-logo:hover {
+                transform: scale(1.1);
+                box-shadow: 0 6px 20px rgba(0, 0, 0, 0.3);
+            }
             h1, h2 {
                 font-weight: 600;
                 margin-bottom: 20px;
             }
+            form {
                 background: #fff;
                 padding: 20px;
                 border-radius: 15px;
                 box-shadow: 0 4px 15px rgba(0,0,0,0.1);
+                margin-bottom: 30px;
             }
             label {
+                font-weight: 500;
+                margin-top: 15px;
                 display: block;
             }
+            input, textarea, select {
                 width: 100%;
+                padding: 12px;
+                margin-top: 5px;
                 border: 1px solid #e2e8f0;
                 border-radius: 8px;
                 font-size: 1rem;
+                transition: all 0.3s ease;
+            }
+            input:focus, textarea:focus, select:focus {
+                border-color: #3b82f6;
+                box-shadow: 0 0 5px rgba(59, 130, 246, 0.3);
+                outline: none;
             }
             button {
+                padding: 12px 20px;
                 border: none;
                 border-radius: 8px;
                 background-color: #3b82f6;
                 color: white;
+                font-weight: 500;
                 cursor: pointer;
+                transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
+                margin-top: 15px;
             }
             button:hover {
                 background-color: #2563eb;
+                box-shadow: 0 4px 15px rgba(37, 99, 235, 0.4);
+                transform: translateY(-2px);
             }
             .delete-button {
                 background-color: #ef4444;
             }
             .delete-button:hover {
                 background-color: #dc2626;
+                box-shadow: 0 4px 15px rgba(220, 38, 38, 0.4);
             }
+            .product-list, .category-list {
+                display: grid;
+                gap: 20px;
+            }
+            .product-item, .category-item {
+                background: #fff;
+                padding: 20px;
+                border-radius: 15px;
+                box-shadow: 0 4px 15px rgba(0,0,0,0.1);
+            }
+            .edit-form {
+                margin-top: 15px;
+                padding: 15px;
+                background: #f7fafc;
+                border-radius: 10px;
             }
+            .option-input-group {
                 display: flex;
                 gap: 10px;
+                margin-top: 5px;
             }
+            .add-option-btn {
+                background-color: #10b981;
+            }
+            .add-option-btn:hover {
+                background-color: #059669;
+            }
+            .stop-notice {
+                color: #ef4444;
             }
         </style>
     </head>
     <body>
         <div class="container">
+            <div class="header">
+                <img src="''' + LOGO_URL + '''" alt="Логотип" class="header-logo">
+                <h1>Админ-панель</h1>
             </div>
+            <h1>Добавление блюда</h1>
+            <form method="POST" enctype="multipart/form-data">
+                <input type="hidden" name="action" value="add">
+                <label>Название блюда:</label>
+                <input type="text" name="name" required>
+                <label>Цена:</label>
+                <input type="number" name="price" step="0.01" required>
+                <label>Описание:</label>
+                <textarea name="description" rows="4" required></textarea>
+                <label>Категория:</label>
+                <select name="category">
+                    <option value="Без категории">Без категории</option>
+                    {% for category in categories %}
+                    <option value="{{ category }}">{{ category }}</option>
+                    {% endfor %}
+                </select>
+                <label>Фотографии (до 10):</label>
+                <input type="file" name="photos" accept="image/*" multiple>
+                <label>Дополнительные опции:</label>
+                <div id="option-inputs">
+                    <div class="option-input-group">
+                        <input type="text" name="option_names" placeholder="Название опции">
+                        <input type="number" name="option_prices" step="0.01" value="0" placeholder="Цена">
+                    </div>
+                </div>
+                <button type="button" class="add-option-btn" onclick="addOptionInput()">Добавить опцию</button>
+                <button type="submit">Добавить блюдо</button>
+            </form>
+            <h1>Управление категориями</h1>
+            <form method="POST">
+                <input type="hidden" name="action" value="add_category">
+                <label>Название категории:</label>
+                <input type="text" name="category_name" required>
+                <button type="submit">Добавить</button>
+            </form>
+            <h2>Список категорий</h2>
+            <div class="category-list">
                 {% for category in categories %}
                 <div class="category-item">
+                    <h3>{{ category }}</h3>
+                    <form method="POST" style="display: inline;">
                         <input type="hidden" name="action" value="delete_category">
                         <input type="hidden" name="category_index" value="{{ loop.index0 }}">
                         <button type="submit" class="delete-button">Удалить</button>
                 {% endfor %}
             </div>
+            <h2>Управление QR-кодом</h2>
+            <form method="POST" enctype="multipart/form-data">
+                <input type="hidden" name="action" value="update_qr">
+                <label>Загрузить QR-код:</label>
+                <input type="file" name="qr_code" accept="image/*">
+                <button type="submit">Обновить</button>
+            </form>
+            {% if qr_code %}
+            <img src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ qr_code }}" alt="QR-код" style="max-width: 200px;">
+            {% endif %}
+            <h2>Управление базой данных</h2>
+            <form method="POST" action="{{ url_for('backup') }}" style="display: inline;">
+                <button type="submit">Создать копию</button>
+            </form>
+            <form method="GET" action="{{ url_for('download') }}" style="display: inline;">
+                <button type="submit">Скачать базу</button>
+            </form>
+            <form method="POST" action="{{ url_for('admin_logout') }}" style="display: inline;">
+                <button type="submit">Выйти из админ-панели</button>
+            </form>
+            <h2>Список блюд</h2>
+            <div class="product-list">
                 {% for product in products %}
                 <div class="product-item">
+                    <h3>{{ product['name'] }}</h3>
+                    <p><strong>Категория:</strong> {{ product.get('category', 'Без категории') }}</p>
+                    <p><strong>Цена:</strong> {{ product['price'] }} с</p>
+                    <p><strong>Описание:</strong> {{ product['description'] }}</p>
+                    <p><strong>Опции:</strong>
+                        {% if product.get('options') and product['options']|length > 0 %}
+                            {{ product['options']|map(attribute='name')|join(', ') }}
+                        {% else %}
+                            Нет опций
+                        {% endif %}
+                    </p>
+                    {% if stoplist[loop.index0|string] %}
+                    <p class="stop-notice">На стопе до: <span class="timer" data-until="{{ stoplist[loop.index0|string]['until'] }}"></span> <button class="remove-stop-button" onclick="removeFromStoplist({{ loop.index0 }})">Снять стоп</button></p>
+                    {% endif %}
+                    {% if product.get('photos') and product['photos']|length > 0 %}
+                    <div style="display: flex; flex-wrap: wrap; gap: 10px;">
+                        {% for photo in product['photos'] %}
+                        <img src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/photos/{{ photo }}"
+                             alt="{{ product['name'] }}"
+                             style="max-width: 100px; border-radius: 10px;">
                         {% endfor %}
+                    </div>
+                    {% endif %}
+                    <details>
+                        <summary>Редактировать</summary>
+                        <form method="POST" enctype="multipart/form-data" class="edit-form">
+                            <input type="hidden" name="action" value="edit">
+                            <input type="hidden" name="index" value="{{ loop.index0 }}">
+                            <label>Название:</label>
+                            <input type="text" name="name" value="{{ product['name'] }}" required>
+                            <label>Цена:</label>
+                            <input type="number" name="price" step="0.01" value="{{ product['price'] }}" required>
+                            <label>Описание:</label>
+                            <textarea name="description" rows="4" required>{{ product['description'] }}</textarea>
+                            <label>Категория:</label>
+                            <select name="category">
+                                <option value="Без категории" {% if product.get('category', 'Без категории') == 'Без категории' %}selected{% endif %}>Без категории</option>
+                                {% for category in categories %}
+                                <option value="{{ category }}" {% if product.get('category') == category %}selected{% endif %}>{{ category }}</option>
+                                {% endfor %}
+                            </select>
+                            <label>Фотографии (до 10):</label>
+                            <input type="file" name="photos" accept="image/*" multiple>
+                            <label>Дополнительные опции:</label>
+                            <div id="edit-option-inputs-{{ loop.index0 }}">
+                                {% for option in product.get('options', []) %}
+                                <div class="option-input-group">
+                                    <input type="text" name="option_names" value="{{ option['name'] }}">
+                                    <input type="number" name="option_prices" step="0.01" value="{{ option['price'] }}">
+                                </div>
+                                {% endfor %}
                             </div>
+                            <button type="button" class="add-option-btn" onclick="addOptionInput('edit-option-inputs-{{ loop.index0 }}')">Добавить опцию</button>
+                            <button type="submit">Сохранить</button>
+                        </form>
+                    </details>
+                    <form method="POST">
+                        <input type="hidden" name="action" value="delete">
+                        <input type="hidden" name="index" value="{{ loop.index0 }}">
+                        <button type="submit" class="delete-button">Удалить</button>
                     </form>
                 </div>
                 {% endfor %}
             </div>
         </div>
         <script>
+            function addOptionInput(containerId = 'option-inputs') {
+                const container = document.getElementById(containerId);
+                const newInput = document.createElement('div');
+                newInput.className = 'option-input-group';
+                newInput.innerHTML = `
                     <input type="text" name="option_names" placeholder="Название опции">
+                    <input type="number" name="option_prices" step="0.01" value="0" placeholder="Цена">
                 `;
+                container.appendChild(newInput);
             }
+            let stoplist = {{ stoplist_for_template|tojson }};
+            function removeFromStoplist(productId) {
+                $.post('/stoplist', {action: 'remove', product_id: productId}, function(response) {
+                    if (response.status === 'success') {
+                        let stopStatusContainer = document.getElementById(`stop-status-${productId}`);
+                        stopStatusContainer.innerHTML = `
+                            <form class="stop-form" data-id="${productId}">
+                                <button type="button" onclick="addToStoplist(${productId}, 30)">30 мин</button>
+                                <button type="button" onclick="addToStoplist(${productId}, 60)">60 мин</button>
+                                <button type="button" onclick="addToStoplist(${productId}, 90)">90 мин</button>
+                            </form>
+                        `;
+                        let productItem = document.querySelector(`.product-item[data-id='${productId}']`);
+                        let removeButton = productItem.querySelector('.remove-stop-button');
+                        if (removeButton) {
+                            productItem.removeChild(removeButton);
+                        }
+                        delete stoplist[productId];
+                    } else {
+                        alert('Ошибка при снятии стоп-листа');
+                    }
+                });
             }
+            function startTimer(productId, until) {
+                const timerEl = document.querySelector(`.product-item [data-until="${until}"] .timer`);
+                if (!timerEl) return;
+                function updateTimer() {
+                    const remaining = new Date(until) - new Date();
+                    if (remaining > 0) {
+                        const minutes = Math.floor(remaining / 60000);
+                        const seconds = Math.floor((remaining % 60000) / 1000);
+                        timerEl.textContent = `в течении ${minutes} минут`; // Modified timer text
+                    } else {
+                        clearInterval(timerInterval);
+                        timerEl.parentElement.textContent = 'Блюдо снова доступно';
+                        let productItem = document.querySelector(`.product-item[data-id='${productId}']`);
+                        let removeButton = productItem.querySelector('.remove-stop-button');
+                        if (removeButton) {
+                            productItem.removeChild(removeButton);
+                        }
+                        delete stoplist[productId];
+                    }
+                }
+                updateTimer();
+                const timerInterval = setInterval(updateTimer, 1000);
             }
+            Object.entries(stoplist).forEach(([id, stopInfo]) => {
+                startTimer(id, stopInfo.until);
+            });
         </script>
     </body>
     </html>
     '''
+    return render_template_string(admin_html, products=products, categories=categories, stoplist=stoplist,
+                                stoplist_for_template=stoplist_for_template, repo_id=REPO_ID, qr_code=data['qr_code'])
 @app.route('/admin_login', methods=['GET', 'POST'])
 def admin_login():
+    if session.get('admin_logged_in') == True:
+        return redirect(url_for('admin'))
+    message = ''
     if request.method == 'POST':
         login = request.form.get('login')
         password = request.form.get('password')
         if login == ADMIN_LOGIN and password == ADMIN_PASSWORD:
+            session['admin_logged_in'] = True
             return redirect(url_for('admin'))
+        else:
+            message = 'Неверный логин или пароль'
+    return render_template_string('''
+        <!DOCTYPE html>
+        <html>
+        <head>
+            <title>Вход в админ-панель</title>
+            <link href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;600&display=swap" rel="stylesheet">
+             <style>
+                body {
+                    font-family: 'Poppins', sans-serif;
+                    background: linear-gradient(135deg, #f0f2f5, #e9ecef);
+                    color: #2d3748;
+                    padding: 20px;
+                    display: flex;
+                    justify-content: center;
+                    align-items: center;
+                    min-height: 100vh;
+                }
+                .login-container {
+                    background: #fff;
+                    padding: 30px;
+                    border-radius: 15px;
+                    box-shadow: 0 8px 20px rgba(0,0,0,0.1);
+                    width: 90%;
+                    max-width: 400px;
+                    text-align: center;
+                }
+                h2 {
+                    font-weight: 600;
+                    margin-bottom: 20px;
+                    color: #3b82f6;
+                }
+                label {
+                    display: block;
+                    margin-bottom: 8px;
+                    font-weight: 500;
+                    text-align: left;
+                }
+                input[type="text"], input[type="password"] {
+                    width: 100%;
+                    padding: 12px;
+                    margin-bottom: 20px;
+                    border: 1px solid #e2e8f0;
+                    border-radius: 8px;
+                    font-size: 1rem;
+                    transition: border-color 0.3s, box-shadow 0.3s;
+                    box-sizing: border-box;
+                }
+                input[type="text"]:focus, input[type="password"]:focus {
+                    border-color: #3b82f6;
+                    box-shadow: 0 0 5px rgba(59, 130, 246, 0.5);
+                    outline: none;
+                }
+                button {
+                    padding: 12px 25px;
+                    border: none;
+                    border-radius: 8px;
+                    background-color: #3b82f6;
+                    color: white;
+                    font-weight: 500;
+                    cursor: pointer;
+                    transition: background-color 0.3s, transform 0.3s, box-shadow 0.3s;
+                }
+                button:hover {
+                    background-color: #2563eb;
+                    transform: translateY(-2px);
+                    box-shadow: 0 4px 10px rgba(37, 99, 235, 0.4);
+                }
+                .error-message {
+                    color: #ef4444;
+                    margin-top: 10px;
+                }
+            </style>
+        </head>
+        <body>
+            <div class="login-container">
+                <h2>Вход в админ-панель</h2>
+                {% if message %}
+                <p class="error-message">{{ message }}</p>
+                {% endif %}
+                <form method="post">
+                    <label for="login">Логин:</label>
+                    <input type="text" id="login" name="login" required>
+                    <label for="password">Пароль:</label>
+                    <input type="password" id="password" name="password" required>
+                    <button type="submit">Войти</button>
+                </form>
+            </div>
+        </body>
+        </html>
+    ''', message=message)
+@app.route('/admin_logout', methods=['POST'])
 def admin_logout():
+    session.pop('admin_logged_in', None)
     return redirect(url_for('admin_login'))
+@app.route('/backup', methods=['POST'])
+def backup():
+    upload_db_to_hf()
+    upload_user_db_to_hf()
+    return "Резервная копия создана.", 200
+@app.route('/download', methods=['GET'])
+def download():
+    download_db_from_hf()
+    download_user_db_from_hf()
+    return "База данных скачана.", 200
 @app.route('/register', methods=['POST'])
 def register():
     login = request.form.get('registerLogin')
     return jsonify({'status': 'error', 'message': message}), 400
 @app.route('/login', methods=['POST'])
+def login_route():
     login = request.form.get('loginUsername')
     password = request.form.get('loginPassword')
     user = authenticate_user(login, password)
     if user:
         session['user_login'] = login
+        return jsonify({'status': 'success'})
     return jsonify({'status': 'error', 'message': 'Неверный логин или пароль'}), 401
 @app.route('/logout')
     return redirect(url_for('menu'))
 @app.route('/update_profile', methods=['POST'])
+def update_profile_route():
     if 'user_login' not in session:
+        return jsonify({'status': 'error', 'message': 'Не авторизован'}), 403
     login = session['user_login']
     phone = request.form.get('editPhone')
     address = request.form.get('editAddress')
 @app.route('/redeem_points', methods=['POST'])
 def redeem_points():
     if 'user_login' not in session:
+        return jsonify({'status': 'error', 'message': 'Не авторизован'}), 403
     login = session['user_login']
     points_to_redeem = int(request.form.get('points', 0))
     success, message = redeem_points_from_user(login, points_to_redeem)
     if success:
+        return jsonify({'status': 'success'})
+    return jsonify({'status': 'error', 'message': message or "Ошибка списания баллов"}), 400
 if __name__ == '__main__':
+    backup_thread = threading.Thread(target=periodic_backup, daemon=True)
+    backup_thread.start()
+    try:
+        load_data()
+        load_user_data()
+    except Exception as e:
+        logging.error(f"Не удалось загрузить базу данных: {e}")
     app.run(debug=True, host='0.0.0.0', port=7860)