Update app.py

app.py

@@ -2025,7 +2025,71 @@ def from_shop_st3():
     except Exception as e:
         return json.dumps({"error": str(e)}), 500
 
+@app.route('/allow', methods=['GET'])
+def from_allow():
+    try:
+        api_sys_control = request.args.get('api_sys')
+
+        if api_sys_control != api_key_sys:
+            return json.dumps({"error": "Unauthorized access"}), 403
+
+        name = request.args.get('name', '')
+        email = request.args.get('email', '')
+        phone = request.args.get('phone', '').lstrip('+')
+        module = request.args.get('module', '')  # Заменяем на "module"
+        status = request.args.get('status', '')
+        del_flag = request.args.get('del', '')
+
+        if not email or not phone:
+            return json.dumps({"error": "Email and phone are required"}), 400
+
+        phone = clean_phone_number_ss(phone)
 
+        conn = sqlite3.connect(DATABASE6)
+        cursor = conn.cursor()
+
+        cursor.execute("SELECT * FROM contacts WHERE email = ? OR phone = ?", (email, phone))
+        result = cursor.fetchone()
+
+        if result:
+            pr5 = result[17] if result[17] else '{}'
+            pr5_data = json.loads(pr5)
+        else:
+            pr5_data = {}
+
+        if del_flag == '1':
+            pr5_data = {}
+        elif module and status:
+            pr5_data[module] = status
+
+        pr5_json = json.dumps(pr5_data)
+
+        utc_now = datetime.utcnow()
+        msk_tz = pytz.timezone('Europe/Moscow')
+        msk_now = utc_now.replace(tzinfo=pytz.utc).astimezone(msk_tz)
+        data_on = msk_now.strftime('%Y-%m-%d %H:%M:%S')
+
+        columns_to_update = ['name', 'phone', 'email', 'pr5', 'data_on']
+        values_to_update = [name, phone, email, pr5_json, data_on]
+
+        if result:
+            set_clause = ', '.join([f"{col} = ?" for col in columns_to_update])
+            query = f"UPDATE contacts SET {set_clause} WHERE email = ? OR phone = ?"
+            cursor.execute(query, values_to_update + [email, phone])
+        else:
+            query = f"INSERT INTO contacts ({', '.join(columns_to_update)}) VALUES ({', '.join(['?' for _ in columns_to_update])})"
+            cursor.execute(query, values_to_update)
+
+        conn.commit()
+
+        replace_null_with_empty_string(conn)
+
+        conn.close()
+
+        return json.dumps(pr5_data), 200
+
+    except Exception as e:
+        return json.dumps({"error": str(e)}), 500