From e0203db21b5b53272285f4c3f3f893559d2ed699 Mon Sep 17 00:00:00 2001
From: Sergey <Sergey@example.com>
Date: Thu, 12 Feb 2026 17:36:27 +0000
Subject: [PATCH] =?UTF-8?q?=D0=97=D0=B0=D0=B3=D1=80=D1=83=D0=B7=D0=B8?=
 =?UTF-8?q?=D1=82=D1=8C=20=D1=84=D0=B0=D0=B9=D0=BB=D1=8B=20=D0=B2=20=C2=AB?=
 =?UTF-8?q?/=C2=BB?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bank.py | 3754 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 3754 insertions(+)
 create mode 100644 bank.py

diff --git a/bank.py b/bank.py
new file mode 100644
index 0000000..b000ea9
--- /dev/null
+++ b/bank.py
@@ -0,0 +1,3754 @@
+from flask import Flask, request, redirect, session, Response, jsonify
+import json, os, random, time, uuid
+from datetime import datetime
+from functools import wraps
+
+app = Flask(__name__)
+app.secret_key = "bank_secret_key_2025"
+app.config['SESSION_PERMANENT'] = True
+app.config['PERMANENT_SESSION_LIFETIME'] = 3600
+
+USERS_FILE = "users.json"
+HISTORY_FILE = "history.json"
+CARDS_FILE = "cards.json"
+SHOP_FILE = "shop.json"
+PAYMENTS_FILE = "payments.json"  # Новый файл для платежей
+
+# ---------- ИНИЦИАЛИЗАЦИЯ ФАЙЛОВ ----------
+def init_files():
+    """Инициализация файлов (без удаления существующих)"""
+    # Создаем файлы если они не существуют
+    files_to_init = [
+        (USERS_FILE, {
+            "admin": {
+                "password": "admin123",
+                "balance": 100000,
+                "deposit": 0,
+                "credit": 0,
+                "role": "admin",
+                "full_name": "Администратор Системы",
+                "email": "admin@bank.com",
+                "api_key": None
+            }
+        }),
+        (HISTORY_FILE, []),
+        (CARDS_FILE, {}),
+        (SHOP_FILE, {"items": [], "ads": []}),
+        (PAYMENTS_FILE, [])  # Инициализация файла платежей
+    ]
+    
+    for filename, default_data in files_to_init:
+        if not os.path.exists(filename):
+            with open(filename, "w", encoding='utf-8') as f:
+                json.dump(default_data, f, indent=4, ensure_ascii=False)
+
+# Инициализируем файлы при запуске
+init_files()
+
+# ---------- ФУНКЦИИ ДЛЯ РАБОТЫ С ДАННЫМИ ----------
+def load_users():
+    try:
+        with open(USERS_FILE, 'r', encoding='utf-8') as f:
+            data = json.load(f)
+            # Убеждаемся, что данные в правильном формате
+            if not isinstance(data, dict):
+                print("Warning: users.json is not a dictionary, resetting to default")
+                data = {
+                    "admin": {
+                        "password": "admin123",
+                        "balance": 100000,
+                        "deposit": 0,
+                        "credit": 0,
+                        "role": "admin",
+                        "full_name": "Администратор Системы",
+                        "email": "admin@bank.com",
+                        "api_key": None
+                    }
+                }
+                save_users(data)
+                return data
+            # Проверяем, что все значения являются словарями
+            cleaned_data = {}
+            for username, user_data in data.items():
+                if isinstance(user_data, dict):
+                    cleaned_data[username] = user_data
+                else:
+                    print(f"Warning: User {username} data is not a dict, resetting")
+                    cleaned_data[username] = {
+                        "password": "reset123",
+                        "balance": 1000,
+                        "deposit": 0,
+                        "credit": 0,
+                        "role": "client",
+                        "full_name": "Пользователь",
+                        "email": "user@example.com",
+                        "api_key": None
+                    }
+            if cleaned_data != data:
+                save_users(cleaned_data)
+            return cleaned_data
+    except Exception as e:
+        print(f"Error loading users: {e}")
+        data = {
+            "admin": {
+                "password": "admin123",
+                "balance": 100000,
+                "deposit": 0,
+                "credit": 0,
+                "role": "admin",
+                "full_name": "Администратор Системы",
+                "email": "admin@bank.com",
+                "api_key": None
+            }
+        }
+        save_users(data)
+        return data
+
+def save_users(data):
+    with open(USERS_FILE, "w", encoding='utf-8') as f:
+        json.dump(data, f, indent=4, ensure_ascii=False)
+
+def load_history():
+    try:
+        with open(HISTORY_FILE, 'r', encoding='utf-8') as f:
+            return json.load(f)
+    except:
+        return []
+
+def save_history(data):
+    with open(HISTORY_FILE, "w", encoding='utf-8') as f:
+        json.dump(data, f, indent=4, ensure_ascii=False)
+
+def load_cards():
+    try:
+        with open(CARDS_FILE, 'r', encoding='utf-8') as f:
+            return json.load(f)
+    except:
+        return {}
+
+def save_cards(data):
+    with open(CARDS_FILE, "w", encoding='utf-8') as f:
+        json.dump(data, f, indent=4, ensure_ascii=False)
+
+# ---------- ФУНКЦИИ ДЛЯ ПЛАТЕЖЕЙ ----------
+def load_payments():
+    """Загрузка платежей"""
+    try:
+        with open(PAYMENTS_FILE, 'r', encoding='utf-8') as f:
+            return json.load(f)
+    except:
+        return []
+
+def save_payments(data):
+    """Сохранение платежей"""
+    with open(PAYMENTS_FILE, "w", encoding='utf-8') as f:
+        json.dump(data, f, indent=4, ensure_ascii=False)
+
+def create_payment(payer, receiver, amount, description="", external_id=""):
+    """Создание платежа"""
+    payments = load_payments()
+    
+    payment_id = str(uuid.uuid4())[:12]
+    payment_data = {
+        "id": payment_id,
+        "payer": payer,
+        "receiver": receiver,
+        "amount": int(amount),
+        "description": description,
+        "external_id": external_id,
+        "created": int(time.time()),
+        "status": "pending",  # pending, completed, failed, cancelled
+        "completed_at": None
+    }
+    
+    payments.append(payment_data)
+    save_payments(payments)
+    
+    return payment_id, payment_data
+
+def process_payment(payment_id, payer_username=None):
+    """Обработка платежа"""
+    payments = load_payments()
+    users = load_users()
+    
+    payment = None
+    for p in payments:
+        if p["id"] == payment_id:
+            payment = p
+            break
+    
+    if not payment:
+        return False, "Платеж не найден"
+    
+    if payment["status"] != "pending":
+        return False, f"Платеж уже обработан (статус: {payment['status']})"
+    
+    # Если передан payer_username, проверяем что это тот же плательщик
+    if payer_username and payment["payer"] != payer_username:
+        return False, "Неверный плательщик"
+    
+    payer = payment["payer"]
+    receiver = payment["receiver"]
+    amount = payment["amount"]
+    
+    # Проверяем существование пользователей
+    if payer not in users:
+        return False, "Плательщик не найден"
+    
+    if receiver not in users:
+        return False, "Получатель не найден"
+    
+    # Проверяем баланс плательщика
+    if users[payer]["balance"] < amount:
+        return False, "Недостаточно средств"
+    
+    # Выполняем перевод
+    users[payer]["balance"] -= amount
+    users[receiver]["balance"] += amount
+    save_users(users)
+    
+    # Обновляем статус платежа
+    for p in payments:
+        if p["id"] == payment_id:
+            p["status"] = "completed"
+            p["completed_at"] = int(time.time())
+            break
+    
+    save_payments(payments)
+    
+    # Добавляем в историю
+    add_history(payer, "payment_sent", amount, f"Платеж #{payment_id} для {receiver}")
+    add_history(receiver, "payment_received", amount, f"Платеж #{payment_id} от {payer}")
+    
+    return True, "Платеж успешно выполнен"
+
+def cancel_payment(payment_id):
+    """Отмена платежа"""
+    payments = load_payments()
+    
+    for payment in payments:
+        if payment["id"] == payment_id and payment["status"] == "pending":
+            payment["status"] = "cancelled"
+            save_payments(payments)
+            return True, "Платеж отменен"
+    
+    return False, "Платеж не найден или уже обработан"
+
+# ---------- ФУНКЦИИ ДЛЯ МАГАЗИНА ----------
+def load_shop():
+    """Загрузка данных магазина"""
+    try:
+        with open(SHOP_FILE, 'r', encoding='utf-8') as f:
+            data = json.load(f)
+            # Обеспечиваем наличие всех ключей
+            if "items" not in data:
+                data["items"] = []
+            if "ads" not in data:
+                data["ads"] = []
+            return data
+    except:
+        return {"items": [], "ads": []}
+
+def save_shop(data):
+    """Сохранение данных магазина"""
+    with open(SHOP_FILE, "w", encoding='utf-8') as f:
+        json.dump(data, f, indent=4, ensure_ascii=False)
+
+def create_shop_item(seller_username, title, description, price, category="other"):
+    """Создание товара в магазине"""
+    shop_data = load_shop()
+    
+    item_id = str(uuid.uuid4())[:8]
+    new_item = {
+        "id": item_id,
+        "seller": seller_username,
+        "title": title,
+        "description": description,
+        "price": int(price),
+        "category": category,
+        "created": int(time.time()),
+        "status": "available",
+        "buyer": None
+    }
+    
+    shop_data["items"].append(new_item)
+    save_shop(shop_data)
+    
+    # Добавляем в историю
+    add_history(seller_username, "create_shop_item", 0, f"Товар: {title}")
+    
+    return item_id
+
+def create_advertisement(author, title, content, contact_info):
+    """Создание объявления"""
+    shop_data = load_shop()
+    
+    ad_id = str(uuid.uuid4())[:8]
+    new_ad = {
+        "id": ad_id,
+        "author": author,
+        "title": title,
+        "content": content,
+        "contact_info": contact_info,
+        "created": int(time.time()),
+        "status": "active"
+    }
+    
+    shop_data["ads"].append(new_ad)
+    save_shop(shop_data)
+    
+    # Добавляем в историю
+    add_history(author, "create_advertisement", 0, f"Объявление: {title}")
+    
+    return ad_id
+
+def buy_item(item_id, buyer_username):
+    """Покупка товара"""
+    shop_data = load_shop()
+    users = load_users()
+    
+    # Находим товар
+    item_to_buy = None
+    for item in shop_data["items"]:
+        if item["id"] == item_id and item["status"] == "available":
+            item_to_buy = item
+            break
+    
+    if not item_to_buy:
+        return False, "Товар не найден или уже продан"
+    
+    seller = item_to_buy["seller"]
+    price = item_to_buy["price"]
+    
+    # Проверяем, есть ли у покупателя достаточно средств
+    if buyer_username not in users:
+        return False, "Покупатель не найден"
+    
+    if users[buyer_username]["balance"] < price:
+        return False, "Недостаточно средств"
+    
+    # Проверяем, что покупатель не покупает у себя
+    if buyer_username == seller:
+        return False, "Нельзя купить собственный товар"
+    
+    # Проверяем, существует ли продавец
+    if seller not in users:
+        return False, "Продавец не найден"
+    
+    # Выполняем транзакцию
+    users[buyer_username]["balance"] -= price
+    users[seller]["balance"] += price
+    save_users(users)
+    
+    # Обновляем статус товара
+    for item in shop_data["items"]:
+        if item["id"] == item_id:
+            item["status"] = "sold"
+            item["buyer"] = buyer_username
+            item["sold_date"] = int(time.time())
+            break
+    
+    save_shop(shop_data)
+    
+    # Добавляем в историю
+    add_history(buyer_username, "buy_item", price, f"Товар: {item_to_buy['title']} от {seller}")
+    add_history(seller, "sell_item", price, f"Товар: {item_to_buy['title']} покупателю {buyer_username}")
+    
+    return True, "Покупка успешно завершена"
+
+# ---------- API КЛЮЧИ ----------
+def generate_api_key():
+    """Генерация API ключа"""
+    return f"bank_api_{uuid.uuid4().hex[:16]}"
+
+def get_user_by_api_key(api_key):
+    """Получение пользователя по API ключу - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    if not api_key:
+        return None, None
+    
+    users = load_users()
+    for username, user_data in users.items():
+        # Проверяем, что user_data является словарем
+        if isinstance(user_data, dict) and user_data.get('api_key') == api_key:
+            return username, user_data
+    return None, None
+
+# ---------- БАНКОВСКИЕ КАРТЫ ----------
+def generate_card_number(user_id, card_type="standard"):
+    """Генерация номера банковской карты"""
+    prefixes = {
+        "standard": ["5469", "4276", "5375", "4856"],
+        "gold": ["5469", "5278", "5375"],
+        "platinum": ["4475", "4876", "4999"]
+    }
+    
+    prefix = random.choice(prefixes.get(card_type, prefixes["standard"]))
+    middle = ''.join([str(random.randint(0, 9)) for _ in range(8)])
+    last_digits = ''.join([str(random.randint(0, 9)) for _ in range(4)])
+    
+    card_number = f"{prefix}{middle}{last_digits}"
+    formatted = ' '.join([card_number[i:i+4] for i in range(0, len(card_number), 4)])
+    
+    return formatted
+
+def generate_cvv():
+    """Генерация CVV кода"""
+    return str(random.randint(100, 999))
+
+def generate_expiry_date():
+    """Генерация срока действия карты"""
+    from datetime import datetime, timedelta
+    expiry = datetime.now() + timedelta(days=365*3)
+    return expiry.strftime("%m/%y")
+
+def get_user_cards(user_id):
+    """Получение всех карт пользователя"""
+    cards = load_cards()
+    return cards.get(user_id, [])
+
+def create_user_card(user_id, user_data, card_type="standard"):
+    """Создание новой карты для пользователя"""
+    cards = load_cards()
+    
+    if user_id not in cards:
+        cards[user_id] = []
+    
+    # Проверяем, не слишком ли много карт у пользователя
+    if len(cards[user_id]) >= 5:
+        return None
+    
+    card_id = str(uuid.uuid4())[:8]
+    
+    new_card = {
+        "id": card_id,
+        "number": generate_card_number(user_id, card_type),
+        "holder": user_data.get('full_name', user_id.upper()),
+        "type": card_type,
+        "cvv": generate_cvv(),
+        "expiry": generate_expiry_date(),
+        "balance": user_data.get('balance', 0),
+        "currency": "USD",
+        "created": int(time.time()),
+        "active": True,
+        "limit": 10000 if card_type == "standard" else 50000 if card_type == "gold" else 100000,
+        "color": {
+            "standard": "#4361ee",
+            "gold": "#ffd166",
+            "platinum": "#e5e5e5"
+        }.get(card_type, "#4361ee")
+    }
+    
+    cards[user_id].append(new_card)
+    save_cards(cards)
+    
+    # Добавляем в историю
+    add_history(user_id, f"create_{card_type}_card", 0, f"Card {new_card['number'][-4:]}")
+    
+    return new_card
+
+# ---------- БАНКОВСКИЕ ОПЕРАЦИИ ----------
+def daily_update():
+    """Ежедневное обновление депозитов и кредитов"""
+    users = load_users()
+    updated = False
+    for user_id, u in users.items():
+        if isinstance(u, dict):  # Проверяем, что это словарь
+            if u.get('deposit', 0) > 0:
+                u['deposit'] = int(u['deposit'] * 1.01)
+                updated = True
+            if u.get('credit', 0) > 0:
+                u['credit'] = int(u['credit'] * 1.05)
+                updated = True
+    if updated:
+        save_users(users)
+
+def add_history(user, action, amount, target=None):
+    """Добавление записи в историю"""
+    hist = load_history()
+    hist.append({
+        "time": int(time.time()),
+        "user": user,
+        "action": action,
+        "amount": amount,
+        "target": target,
+        "id": str(uuid.uuid4())[:8]
+    })
+    save_history(hist)
+
+# ---------- ДЕКОРАТОРЫ ----------
+def login_required(f):
+    """Декоратор для проверки авторизации"""
+    @wraps(f)
+    def decorated_function(*args, **kwargs):
+        if 'user' not in session:
+            return redirect('/')
+        return f(*args, **kwargs)
+    return decorated_function
+
+def admin_required(f):
+    """Декоратор для проверки прав администратора"""
+    @wraps(f)
+    def decorated_function(*args, **kwargs):
+        if 'user' not in session:
+            return redirect('/')
+        
+        users = load_users()
+        user_data = users.get(session['user'])
+        
+        if not user_data or not isinstance(user_data, dict) or user_data.get('role') != 'admin':
+            return redirect('/dashboard')
+        
+        return f(*args, **kwargs)
+    return decorated_function
+
+# ИСПРАВЛЕННЫЙ ДЕКОРАТОР API
+def api_key_required(f):
+    """Декоратор для проверки API ключа - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    @wraps(f)
+    def decorated_function(*args, **kwargs):
+        api_key = None
+        
+        # 1. Проверяем заголовок X-API-Key
+        if 'X-API-Key' in request.headers:
+            api_key = request.headers.get('X-API-Key')
+        
+        # 2. Проверяем параметр запроса api_key
+        if not api_key and request.args.get('api_key'):
+            api_key = request.args.get('api_key')
+        
+        # 3. Проверяем JSON тело
+        if not api_key and request.is_json:
+            try:
+                data = request.get_json()
+                if data and 'api_key' in data:
+                    api_key = data.get('api_key')
+            except:
+                pass
+        
+        # 4. Проверяем форму
+        if not api_key and request.form.get('api_key'):
+            api_key = request.form.get('api_key')
+        
+        if not api_key:
+            return jsonify({'success': False, 'error': 'API key required'}), 401
+        
+        # Получаем пользователя по API ключу
+        username, user_data = get_user_by_api_key(api_key)
+        if not username:
+            return jsonify({'success': False, 'error': 'Invalid API key'}), 401
+        
+        # Сохраняем данные пользователя в объекте request
+        request.username = username
+        request.user_data = user_data
+        
+        return f(*args, **kwargs)
+    return decorated_function
+
+# ---------- HTML ШАБЛОНЫ ----------
+def render_login():
+    return '''
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Банк | Вход в систему</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <style>
+        :root {
+            --primary: #4361ee;
+            --secondary: #3a0ca3;
+            --gradient: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+        }
+        body {
+            background: var(--gradient);
+            min-height: 100vh;
+            display: flex;
+            align-items: center;
+            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
+        }
+        .login-card {
+            background: white;
+            border-radius: 20px;
+            box-shadow: 0 20px 40px rgba(0,0,0,0.1);
+            overflow: hidden;
+        }
+        .login-header {
+            background: var(--gradient);
+            color: white;
+            padding: 30px;
+            text-align: center;
+        }
+        .login-body {
+            padding: 40px;
+        }
+        .form-control {
+            border: 2px solid #e9ecef;
+            border-radius: 10px;
+            padding: 12px 15px;
+            transition: all 0.3s;
+        }
+        .form-control:focus {
+            border-color: var(--primary);
+            box-shadow: 0 0 0 0.25rem rgba(67, 97, 238, 0.25);
+        }
+        .btn-primary {
+            background: var(--gradient);
+            border: none;
+            border-radius: 10px;
+            padding: 12px;
+            font-weight: 600;
+            transition: all 0.3s;
+        }
+        .btn-primary:hover {
+            transform: translateY(-2px);
+            box-shadow: 0 10px 20px rgba(67, 97, 238, 0.3);
+        }
+        .alert {
+            border-radius: 10px;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <div class="row justify-content-center">
+            <div class="col-md-5">
+                <div class="login-card">
+                    <div class="login-header">
+                        <i class="fas fa-university fa-3x mb-3"></i>
+                        <h2>Добро пожаловать в Банк</h2>
+                        <p class="mb-0">Вход в систему</p>
+                    </div>
+                    <div class="login-body">
+                        <form method="post">
+                            <div class="mb-3">
+                                <label class="form-label">Логин</label>
+                                <div class="input-group">
+                                    <span class="input-group-text"><i class="fas fa-user"></i></span>
+                                    <input type="text" name="username" class="form-control" placeholder="Введите логин" required>
+                                </div>
+                            </div>
+                            <div class="mb-4">
+                                <label class="form-label">Пароль</label>
+                                <div class="input-group">
+                                    <span class="input-group-text"><i class="fas fa-lock"></i></span>
+                                    <input type="password" name="password" class="form-control" placeholder="Введите пароль" required>
+                                </div>
+                            </div>
+                            <button type="submit" class="btn btn-primary w-100 mb-3">
+                                <i class="fas fa-sign-in-alt me-2"></i>Войти
+                            </button>
+                            <div class="text-center">
+                                <p class="mb-0">Нет аккаунта? <a href="/register" class="text-decoration-none">Зарегистрироваться</a></p>
+                            </div>
+                        </form>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js"></script>
+</body>
+</html>
+'''
+
+def render_register():
+    return '''
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Банк | Регистрация</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <style>
+        :root {
+            --primary: #4361ee;
+            --secondary: #3a0ca3;
+            --gradient: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+        }
+        body {
+            background: var(--gradient);
+            min-height: 100vh;
+            display: flex;
+            align-items: center;
+            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
+        }
+        .register-card {
+            background: white;
+            border-radius: 20px;
+            box-shadow: 0 20px 40px rgba(0,0,0,0.1);
+            overflow: hidden;
+        }
+        .register-header {
+            background: var(--gradient);
+            color: white;
+            padding: 30px;
+            text-align: center;
+        }
+        .register-body {
+            padding: 40px;
+        }
+        .form-control {
+            border: 2px solid #e9ecef;
+            border-radius: 10px;
+            padding: 12px 15px;
+            transition: all 0.3s;
+        }
+        .form-control:focus {
+            border-color: var(--primary);
+            box-shadow: 0 0 0 0.25rem rgba(67, 97, 238, 0.25);
+        }
+        .btn-primary {
+            background: var(--gradient);
+            border: none;
+            border-radius: 10px;
+            padding: 12px;
+            font-weight: 600;
+            transition: all 0.3s;
+        }
+        .btn-primary:hover {
+            transform: translateY(-2px);
+            box-shadow: 0 10px 20px rgba(67, 97, 238, 0.3);
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <div class="row justify-content-center">
+            <div class="col-md-6">
+                <div class="register-card">
+                    <div class="register-header">
+                        <i class="fas fa-user-plus fa-3x mb-3"></i>
+                        <h2>Регистрация аккаунта</h2>
+                        <p class="mb-0">Создайте свой банковский аккаунт</p>
+                    </div>
+                    <div class="register-body">
+                        <form method="post">
+                            <div class="row">
+                                <div class="col-md-6 mb-3">
+                                    <label class="form-label">Логин</label>
+                                    <input type="text" name="username" class="form-control" placeholder="Придумайте логин" required>
+                                </div>
+                                <div class="col-md-6 mb-3">
+                                    <label class="form-label">Пароль</label>
+                                    <input type="password" name="password" class="form-control" placeholder="Придумайте пароль" required>
+                                </div>
+                            </div>
+                            <div class="row">
+                                <div class="col-md-6 mb-3">
+                                    <label class="form-label">Имя</label>
+                                    <input type="text" name="first_name" class="form-control" placeholder="Ваше имя" required>
+                                </div>
+                                <div class="col-md-6 mb-3">
+                                    <label class="form-label">Фамилия</label>
+                                    <input type="text" name="last_name" class="form-control" placeholder="Ваша фамилия" required>
+                                </div>
+                            </div>
+                            <div class="mb-4">
+                                <label class="form-label">Email</label>
+                                <input type="email" name="email" class="form-control" placeholder="email@example.com" required>
+                            </div>
+                            <button type="submit" class="btn btn-primary w-100 mb-3">
+                                <i class="fas fa-user-plus me-2"></i>Создать аккаунт
+                            </button>
+                            <div class="text-center">
+                                <p class="mb-0">Уже есть аккаунт? <a href="/" class="text-decoration-none">Войти</a></p>
+                            </div>
+                        </form>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js"></script>
+</body>
+</html>
+'''
+
+def render_card_html(card, width="400px"):
+    """Генерация HTML для банковской карты"""
+    colors = {
+        "standard": "#4361ee",
+        "gold": "#ffd166", 
+        "platinum": "#e5e5e5"
+    }
+    
+    bg_color = card.get('color', colors.get(card['type'], "#4361ee"))
+    text_color = "#ffffff" if card['type'] == 'standard' else "#000000"
+    
+    return f'''
+<div class="bank-card" style="width: {width}; background: linear-gradient(135deg, {bg_color} 0%, {bg_color}dd 100%); color: {text_color};">
+    <div class="bank-logo">
+        <span>BANK CARD</span>
+        <div class="chip"></div>
+    </div>
+    <div class="card-number">
+        {card['number']}
+    </div>
+    <div class="card-holder">
+        {card['holder']}
+    </div>
+</div>
+'''
+
+def render_dashboard(user_data, history_data, user_cards, shop_data=None):
+    """Генерация HTML личного кабинета"""
+    # Форматирование времени истории
+    for h in history_data:
+        h['formatted_time'] = datetime.fromtimestamp(h['time']).strftime('%d.%m.%Y %H:%M')
+    
+    # HTML для истории
+    history_html = ""
+    for h in history_data[-10:][::-1]:
+        icon = "fa-history"
+        color = "text-primary"
+        if "deposit" in h['action']:
+            icon = "fa-piggy-bank"
+            color = "text-info"
+        elif "credit" in h['action']:
+            icon = "fa-credit-card"
+            color = "text-warning"
+        elif "transfer" in h['action']:
+            icon = "fa-exchange-alt"
+            color = "text-primary"
+        elif "card" in h['action']:
+            icon = "fa-credit-card"
+            color = "text-success"
+        elif "api" in h['action']:
+            icon = "fa-key"
+            color = "text-secondary"
+        elif "shop" in h['action'] or "item" in h['action'] or "advertisement" in h['action']:
+            icon = "fa-shopping-cart"
+            color = "text-success"
+        elif "payment" in h['action']:
+            icon = "fa-credit-card"
+            color = "text-success"
+        
+        history_html += f'''
+        <tr>
+            <td><i class="fas {icon} {color} me-2"></i>{h['formatted_time']}</td>
+            <td><span class="badge bg-light text-dark">{h['user']}</span></td>
+            <td>{h['action']}</td>
+            <td class="fw-bold">{h['amount']:,} $</td>
+            <td>{h.get('target', '-')}</td>
+        </tr>
+        '''
+    
+    # HTML для банковских карт
+    cards_html = ""
+    if user_cards:
+        for card in user_cards:
+            width = "350px" if len(card['number']) < 24 else "400px" if len(card['number']) < 28 else "450px"
+            cards_html += f'''
+            <div class="col-md-6 col-lg-4">
+                <div class="card h-100">
+                    <div class="card-body">
+                        <h5 class="card-title">
+                            <i class="fas fa-credit-card me-2"></i>
+                            Карта {card['type'].upper()}
+                        </h5>
+                        {render_card_html(card, width)}
+                        <div class="mt-3">
+                            <p class="mb-1"><small>CVV: <strong>{card['cvv']}</strong></small></p>
+                            <p class="mb-1"><small>Срок: <strong>{card['expiry']}</strong></small></p>
+                            <p class="mb-0"><small>Баланс: <strong>${card['balance']:,}</strong></small></p>
+                            <p class="mb-0"><small>Лимит: <strong>${card['limit']:,}</strong></small></p>
+                            <form action="/delete_card/{card['id']}" method="post" class="mt-2">
+                                <button type="submit" class="btn btn-danger btn-sm w-100">
+                                    <i class="fas fa-trash me-1"></i> Удалить
+                                </button>
+                            </form>
+                        </div>
+                    </div>
+                </div>
+            </div>
+            '''
+    else:
+        cards_html = '''
+        <div class="col-12">
+            <div class="alert alert-info">
+                <i class="fas fa-info-circle me-2"></i>
+                У вас еще нет банковских карт. Создайте свою первую карту!
+            </div>
+        </div>
+        '''
+    
+    # HTML для API ключа
+    api_key_html = ""
+    if user_data.get('api_key'):
+        api_key_html = f'''
+        <div class="alert alert-success">
+            <h6><i class="fas fa-key me-2"></i>Ваш API ключ</h6>
+            <div class="input-group">
+                <input type="text" id="apiKey" class="form-control" value="{user_data['api_key']}" readonly>
+                <button class="btn btn-outline-secondary" type="button" onclick="copyApiKey()">
+                    <i class="fas fa-copy"></i>
+                </button>
+            </div>
+            <small class="text-muted">Используйте этот ключ для доступа к API</small>
+        </div>
+        '''
+    else:
+        api_key_html = '''
+        <div class="alert alert-warning">
+            <h6><i class="fas fa-key me-2"></i>API ключ не создан</h6>
+            <form action="/generate_api_key" method="post">
+                <button type="submit" class="btn btn-primary btn-sm">
+                    <i class="fas fa-plus me-1"></i>Создать API ключ
+                </button>
+            </form>
+        </div>
+        '''
+    
+    # HTML для магазина
+    shop_tab_content = ""
+    if shop_data:
+        # Товары
+        shop_items_html = ""
+        available_items = [item for item in shop_data["items"] if item["status"] == "available"]
+        
+        if available_items:
+            for item in available_items[-10:][::-1]:  # Последние 10 товаров
+                created_date = datetime.fromtimestamp(item["created"]).strftime('%d.%m.%Y')
+                shop_items_html += f'''
+                <div class="col-md-6 col-lg-4">
+                    <div class="card h-100 shop-item-card">
+                        <div class="card-body">
+                            <h5 class="card-title">{item["title"]}</h5>
+                            <p class="card-text">{item["description"]}</p>
+                            <p class="card-text">
+                                <small class="text-muted">Продавец: {item["seller"]}</small><br>
+                                <small class="text-muted">Категория: {item["category"]}</small><br>
+                                <small class="text-muted">Дата: {created_date}</small>
+                            </p>
+                            <div class="d-flex justify-content-between align-items-center">
+                                <span class="h4 text-success">${item["price"]:,}</span>
+                                <form action="/buy_item/{item['id']}" method="post">
+                                    <button type="submit" class="btn btn-primary">
+                                        <i class="fas fa-shopping-cart me-1"></i> Купить
+                                    </button>
+                                </form>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+                '''
+        else:
+            shop_items_html = '''
+            <div class="col-12">
+                <div class="alert alert-info">
+                    <i class="fas fa-info-circle me-2"></i>
+                    В магазине пока нет товаров. Будьте первым, кто добавит товар!
+                </div>
+            </div>
+            '''
+        
+        # Объявления
+        ads_html = ""
+        active_ads = [ad for ad in shop_data["ads"] if ad["status"] == "active"]
+        
+        if active_ads:
+            for ad in active_ads[-10:][::-1]:  # Последние 10 объявлений
+                created_date = datetime.fromtimestamp(ad["created"]).strftime('%d.%m.%Y')
+                ads_html += f'''
+                <div class="col-md-6">
+                    <div class="card h-100">
+                        <div class="card-body">
+                            <h5 class="card-title">{ad["title"]}</h5>
+                            <p class="card-text">{ad["content"]}</p>
+                            <p class="card-text">
+                                <small class="text-muted">Автор: {ad["author"]}</small><br>
+                                <small class="text-muted">Контакты: {ad["contact_info"]}</small><br>
+                                <small class="text-muted">Дата: {created_date}</small>
+                            </p>
+                        </div>
+                    </div>
+                </div>
+                '''
+        
+        shop_tab_content = f'''
+        <div class="tab-pane fade" id="shop">
+            <div class="row mb-4">
+                <div class="col-12">
+                    <div class="d-flex justify-content-between mb-3">
+                        <h4><i class="fas fa-store me-2"></i>Магазин</h4>
+                        <div>
+                            <button class="btn btn-success me-2" data-bs-toggle="modal" data-bs-target="#addItemModal">
+                                <i class="fas fa-plus me-1"></i>Добавить товар
+                            </button>
+                            <button class="btn btn-info" data-bs-toggle="modal" data-bs-target="#addAdModal">
+                                <i class="fas fa-bullhorn me-1"></i>Добавить объявление
+                            </button>
+                        </div>
+                    </div>
+                </div>
+            </div>
+            
+            <h5><i class="fas fa-shopping-bag me-2"></i>Товары в магазине</h5>
+            <div class="row g-4 mb-4">
+                {shop_items_html}
+            </div>
+            
+            <h5><i class="fas fa-bullhorn me-2"></i>Объявления</h5>
+            <div class="row g-4">
+                {ads_html}
+            </div>
+        </div>
+        '''
+    
+    # HTML для админ-панели
+    admin_tab = ""
+    if user_data.get('role') == 'admin':
+        admin_tab = '''
+        <li class="nav-item">
+            <a class="nav-link" href="/admin">
+                <i class="fas fa-cogs me-2"></i>Админ-панель
+            </a>
+        </li>
+        '''
+    
+    return f'''
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Банк | Личный кабинет</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <style>
+        :root {{
+            --primary: #4361ee;
+            --secondary: #3a0ca3;
+            --gradient: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+        }}
+        
+        body {{
+            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
+            background: #f5f7fb;
+        }}
+        
+        .navbar-custom {{
+            background: var(--gradient) !important;
+            box-shadow: 0 4px 20px rgba(67, 97, 238, 0.3);
+        }}
+        
+        .sidebar {{
+            background: white;
+            border-radius: 15px;
+            box-shadow: 0 5px 15px rgba(0,0,0,0.05);
+            padding: 20px;
+            height: fit-content;
+        }}
+        
+        .main-content {{
+            background: white;
+            border-radius: 15px;
+            box-shadow: 0 5px 15px rgba(0,0,0,0.05);
+            padding: 25px;
+        }}
+        
+        .balance-card {{
+            background: var(--gradient);
+            color: white;
+            border-radius: 15px;
+            padding: 20px;
+            margin-bottom: 20px;
+        }}
+        
+        .stat-card {{
+            background: white;
+            border-radius: 15px;
+            padding: 15px;
+            box-shadow: 0 3px 10px rgba(0,0,0,0.05);
+            border-left: 4px solid var(--primary);
+            margin-bottom: 15px;
+        }}
+        
+        .bank-card {{
+            border-radius: 12px;
+            padding: 20px;
+            color: white;
+            display: flex;
+            flex-direction: column;
+            justify-content: space-between;
+            box-shadow: 0 10px 25px rgba(0,0,0,0.2);
+            position: relative;
+            overflow: hidden;
+            min-height: 180px;
+            margin: 10px 0;
+        }}
+        
+        .bank-card::before {{
+            content: "";
+            position: absolute;
+            top: 0;
+            left: 0;
+            right: 0;
+            bottom: 0;
+            background: radial-gradient(circle at top right, rgba(255,255,255,0.1) 0%, transparent 50%);
+        }}
+        
+        .bank-logo {{
+            font-size: 18px;
+            font-weight: bold;
+            letter-spacing: 1px;
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            margin-bottom: 20px;
+        }}
+        
+        .chip {{
+            width: 35px;
+            height: 25px;
+            background: linear-gradient(135deg, #ffd166 0%, #ff9e00 100%);
+            border-radius: 5px;
+            position: relative;
+        }}
+        
+        .chip::before {{
+            content: "";
+            position: absolute;
+            top: 3px;
+            left: 3px;
+            right: 3px;
+            bottom: 3px;
+            border: 2px solid rgba(0,0,0,0.2);
+            border-radius: 3px;
+        }}
+        
+        .card-number {{
+            font-size: 18px;
+            letter-spacing: 2px;
+            font-weight: bold;
+            text-align: center;
+            margin: 15px 0;
+            word-break: break-all;
+        }}
+        
+        .card-holder {{
+            font-size: 14px;
+            letter-spacing: 1px;
+            text-transform: uppercase;
+        }}
+        
+        .nav-tabs .nav-link {{
+            border: none;
+            border-radius: 10px;
+            padding: 10px 15px;
+            margin: 0 5px;
+            color: #666;
+            font-weight: 500;
+        }}
+        
+        .nav-tabs .nav-link.active {{
+            background: var(--gradient);
+            color: white;
+        }}
+        
+        .table-custom {{
+            background: white;
+            border-radius: 12px;
+            overflow: hidden;
+            box-shadow: 0 3px 10px rgba(0,0,0,0.05);
+        }}
+        
+        .table-custom thead {{
+            background: var(--gradient);
+            color: white;
+        }}
+        
+        .btn-primary {{
+            background: var(--gradient);
+            border: none;
+            border-radius: 10px;
+            padding: 8px 15px;
+            font-weight: 600;
+        }}
+        
+        .btn-primary:hover {{
+            transform: translateY(-2px);
+            box-shadow: 0 5px 15px rgba(67, 97, 238, 0.3);
+        }}
+        
+        .modal-header {{
+            background: var(--gradient);
+            color: white;
+        }}
+        
+        .create-card-btn {{
+            background: linear-gradient(135deg, #ffd166 0%, #ff9e00 100%);
+            border: none;
+            color: #000;
+            font-weight: 600;
+        }}
+        
+        .create-card-btn:hover {{
+            background: linear-gradient(135deg, #ffc145 0%, #e68900 100%);
+            color: #000;
+        }}
+        
+        .services-grid {{
+            display: grid;
+            grid-template-columns: repeat(auto-fill, minmax(250px, 1fr));
+            gap: 20px;
+            margin-top: 20px;
+        }}
+        
+        .service-card {{
+            background: white;
+            border-radius: 12px;
+            padding: 20px;
+            box-shadow: 0 3px 10px rgba(0,0,0,0.05);
+            border-left: 4px solid var(--primary);
+            transition: all 0.3s;
+        }}
+        
+        .service-card:hover {{
+            transform: translateY(-5px);
+            box-shadow: 0 10px 20px rgba(0,0,0,0.1);
+        }}
+        
+        .api-docs {{
+            background: #f8f9fa;
+            border-radius: 10px;
+            padding: 20px;
+            margin-top: 20px;
+        }}
+        
+        .code-block {{
+            background: #1e1e1e;
+            color: #d4d4d4;
+            padding: 15px;
+            border-radius: 5px;
+            font-family: "Courier New", monospace;
+            overflow-x: auto;
+            margin: 10px 0;
+        }}
+        
+        .shop-item-card {{
+            transition: all 0.3s;
+        }}
+        
+        .shop-item-card:hover {{
+            transform: translateY(-5px);
+            box-shadow: 0 10px 20px rgba(0,0,0,0.1);
+        }}
+    </style>
+</head>
+<body>
+    <nav class="navbar navbar-expand-lg navbar-custom navbar-dark">
+        <div class="container">
+            <a class="navbar-brand d-flex align-items-center" href="/dashboard">
+                <i class="fas fa-university fa-2x me-2"></i>
+                <div>
+                    <h4 class="mb-0">Банк</h4>
+                    <small class="opacity-75">Финансовая система</small>
+                </div>
+            </a>
+            <div class="d-flex align-items-center">
+                <span class="badge bg-light text-dark me-3">
+                    <i class="fas fa-user-circle me-1"></i>
+                    {session['user']} ({user_data.get('role', 'client')})
+                </span>
+                <a href="/logout" class="btn btn-outline-light btn-sm">
+                    <i class="fas fa-sign-out-alt me-1"></i>Выход
+                </a>
+            </div>
+        </div>
+    </nav>
+
+    <div class="container mt-4 mb-5">
+        <div class="row g-4">
+            <div class="col-lg-3">
+                <div class="sidebar">
+                    <h5 class="mb-3"><i class="fas fa-chart-line me-2"></i>Финансы</h5>
+                    
+                    <div class="balance-card">
+                        <h6 class="opacity-75">Текущий баланс</h6>
+                        <h2 class="{'text-success' if user_data['balance'] >= 0 else 'text-danger'}">
+                            ${user_data['balance']:,}
+                        </h2>
+                        <small>Доступные средства</small>
+                    </div>
+                    
+                    <div class="stat-card">
+                        <div class="d-flex justify-content-between">
+                            <div>
+                                <h6>Вклад</h6>
+                                <h5 class="text-success">${user_data['deposit']:,}</h5>
+                            </div>
+                            <i class="fas fa-piggy-bank fa-2x text-success"></i>
+                        </div>
+                        <small class="text-muted">+1% ежедневно</small>
+                    </div>
+                    
+                    <div class="stat-card">
+                        <div class="d-flex justify-content-between">
+                            <div>
+                                <h6>Кредит</h6>
+                                <h5 class="text-danger">${user_data['credit']:,}</h5>
+                            </div>
+                            <i class="fas fa-credit-card fa-2x text-danger"></i>
+                        </div>
+                        <small class="text-muted">+5% ежедневно</small>
+                    </div>
+                    
+                    <div class="mt-3">
+                        <h6><i class="fas fa-wallet me-2"></i>Операции</h6>
+                        <div class="d-grid gap-2 mt-2">
+                            <button class="btn btn-primary" data-bs-toggle="modal" data-bs-target="#depositModal">
+                                <i class="fas fa-plus-circle me-1"></i>Пополнить вклад
+                            </button>
+                            <button class="btn btn-outline-primary" data-bs-toggle="modal" data-bs-target="#creditModal">
+                                <i class="fas fa-hand-holding-usd me-1"></i>Взять кредит
+                            </button>
+                            <button class="btn btn-outline-success" data-bs-toggle="modal" data-bs-target="#transferModal">
+                                <i class="fas fa-exchange-alt me-1"></i>Перевод
+                            </button>
+                            <button class="btn create-card-btn" data-bs-toggle="modal" data-bs-target="#cardModal">
+                                <i class="fas fa-credit-card me-1"></i>Создать карту
+                            </button>
+                            <a href="/payment_page" class="btn btn-warning">
+                                <i class="fas fa-credit-card me-1"></i>Оплата
+                            </a>
+                        </div>
+                    </div>
+                    
+                    <div class="mt-4">
+                        {api_key_html}
+                    </div>
+                </div>
+            </div>
+
+            <div class="col-lg-9">
+                <div class="main-content">
+                    <ul class="nav nav-tabs mb-4">
+                        <li class="nav-item">
+                            <a class="nav-link active" data-bs-toggle="tab" href="#services">
+                                <i class="fas fa-concierge-bell me-1"></i>Услуги
+                            </a>
+                        </li>
+                        <li class="nav-item">
+                            <a class="nav-link" data-bs-toggle="tab" href="#cards">
+                                <i class="fas fa-credit-card me-1"></i>Мои карты
+                            </a>
+                        </li>
+                        <li class="nav-item">
+                            <a class="nav-link" data-bs-toggle="tab" href="#shop">
+                                <i class="fas fa-store me-1"></i>Магазин
+                            </a>
+                        </li>
+                        <li class="nav-item">
+                            <a class="nav-link" data-bs-toggle="tab" href="#history">
+                                <i class="fas fa-history me-1"></i>История
+                            </a>
+                        </li>
+                        <li class="nav-item">
+                            <a class="nav-link" data-bs-toggle="tab" href="#api">
+                                <i class="fas fa-code me-1"></i>API
+                            </a>
+                        </li>
+                        {admin_tab}
+                    </ul>
+
+                    <div class="tab-content">
+                        <div class="tab-pane fade show active" id="services">
+                            <div class="services-grid">
+                                <div class="service-card">
+                                    <h5><i class="fas fa-piggy-bank text-primary me-2"></i>Вклады</h5>
+                                    <p class="text-muted">Откройте вклад под 1% ежедневно и получайте пассивный доход.</p>
+                                </div>
+                                <div class="service-card">
+                                    <h5><i class="fas fa-credit-card text-success me-2"></i>Кредиты</h5>
+                                    <p class="text-muted">Получите кредит на любые цели. Ставка 5% ежедневно.</p>
+                                </div>
+                                <div class="service-card">
+                                    <h5><i class="fas fa-exchange-alt text-info me-2"></i>Переводы</h5>
+                                    <p class="text-muted">Быстрые переводы между клиентами банка без комиссий.</p>
+                                </div>
+                                <div class="service-card">
+                                    <h5><i class="fas fa-credit-card text-warning me-2"></i>Банковские карты</h5>
+                                    <p class="text-muted">Выпустите банковскую карту для удобных платежей.</p>
+                                </div>
+                                <div class="service-card">
+                                    <h5><i class="fas fa-store text-danger me-2"></i>Магазин</h5>
+                                    <p class="text-muted">Покупайте и продавайте товары, размещайте объявления.</p>
+                                </div>
+                                <div class="service-card">
+                                    <h5><i class="fas fa-credit-card text-secondary me-2"></i>Платежи</h5>
+                                    <p class="text-muted">Принимайте платежи от клиентов через API или ссылки.</p>
+                                </div>
+                                <div class="service-card">
+                                    <h5><i class="fas fa-code text-dark me-2"></i>API Доступ</h5>
+                                    <p class="text-muted">Интегрируйте банковские услуги в ваши приложения через API.</p>
+                                </div>
+                            </div>
+                        </div>
+                        
+                        <div class="tab-pane fade" id="cards">
+                            <div class="row g-4">
+                                {cards_html}
+                            </div>
+                        </div>
+                        
+                        {shop_tab_content}
+                        
+                        <div class="tab-pane fade" id="history">
+                            <div class="table-responsive">
+                                <table class="table table-custom table-hover">
+                                    <thead>
+                                        <tr>
+                                            <th><i class="fas fa-clock"></i> Время</th>
+                                            <th><i class="fas fa-user"></i> Пользователь</th>
+                                            <th><i class="fas fa-tasks"></i> Операция</th>
+                                            <th><i class="fas fa-dollar-sign"></i> Сумма</th>
+                                            <th><i class="fas fa-user-friends"></i>Получатель</th>
+                                        </tr>
+                                    </thead>
+                                    <tbody>
+                                        {history_html}
+                                    </tbody>
+                                </table>
+                            </div>
+                        </div>
+                        
+                        <div class="tab-pane fade" id="api">
+                            <div class="api-docs">
+                                <h4><i class="fas fa-code me-2"></i>Документация API</h4>
+                                <p>Используйте ваш API ключ для доступа к банковским операциям через REST API.</p>
+                                
+                                <h5 class="mt-4">Базовый URL</h5>
+                                <div class="code-block">
+                                    http://ваш-домен/api/v1/
+                                </div>
+                                
+                                <h5 class="mt-4">Аутентификация</h5>
+                                <p>Добавьте заголовок с вашим API ключом:</p>
+                                <div class="code-block">
+                                    X-API-Key: ваш_api_ключ
+                                </div>
+                                <p>Или передайте как параметр:</p>
+                                <div class="code-block">
+                                    ?api_key=ваш_api_ключ
+                                </div>
+                                
+                                <h5 class="mt-4">Доступные методы</h5>
+                                <div class="table-responsive">
+                                    <table class="table table-bordered">
+                                        <thead>
+                                            <tr>
+                                                <th>Метод</th>
+                                                <th>Эндпоинт</th>
+                                                <th>Описание</th>
+                                                <th>Параметры</th>
+                                            </tr>
+                                        </thead>
+                                        <tbody>
+                                            <tr>
+                                                <td><span class="badge bg-info">GET</span></td>
+                                                <td>/api/v1/balance</td>
+                                                <td>Получить информацию о балансе</td>
+                                                <td>-</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-info">GET</span></td>
+                                                <td>/api/v1/history</td>
+                                                <td>Получить историю операций</td>
+                                                <td>limit (опционально)</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-info">GET</span></td>
+                                                <td>/api/v1/cards</td>
+                                                <td>Получить список карт</td>
+                                                <td>-</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-success">POST</span></td>
+                                                <td>/api/v1/deposit</td>
+                                                <td>Открыть вклад</td>
+                                                <td>amount (int)</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-success">POST</span></td>
+                                                <td>/api/v1/credit</td>
+                                                <td>Взять кредит</td>
+                                                <td>amount (int)</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-success">POST</span></td>
+                                                <td>/api/v1/transfer</td>
+                                                <td>Сделать перевод</td>
+                                                <td>target (str), amount (int)</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-success">POST</span></td>
+                                                <td>/api/v1/cards/create</td>
+                                                <td>Создать карту</td>
+                                                <td>card_type (standard|gold|platinum)</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-danger">POST</span></td>
+                                                <td>/api/v1/cards/delete</td>
+                                                <td>Удалить карту</td>
+                                                <td>card_id (str)</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-info">GET</span></td>
+                                                <td>/api/v1/shop/items</td>
+                                                <td>Получить список товаров</td>
+                                                <td>-</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-info">GET</span></td>
+                                                <td>/api/v1/shop/ads</td>
+                                                <td>Получить список объявлений</td>
+                                                <td>-</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-success">POST</span></td>
+                                                <td>/api/v1/payment/create</td>
+                                                <td>Создать платеж</td>
+                                                <td>receiver, amount, description</td>
+                                            </tr>
+                                            <tr>
+                                                <td><span class="badge bg-success">POST</span></td>
+                                                <td>/api/v1/payment/process</td>
+                                                <td>Выполнить платеж</td>
+                                                <td>payment_id</td>
+                                            </tr>
+                                        </tbody>
+                                    </table>
+                                </div>
+                                
+                                <h5 class="mt-4">Примеры использования</h5>
+                                <p>Python с requests:</p>
+                                <div class="code-block">
+import requests<br>
+<br>
+api_key = "ваш_api_ключ"<br>
+base_url = "http://ваш-домен/api/v1"<br>
+<br>
+# Получить баланс<br>
+headers = {{"X-API-Key": api_key}}<br>
+response = requests.get(f"{{base_url}}/balance", headers=headers)<br>
+print(response.json())<br>
+<br>
+# Сделать перевод<br>
+data = {{"target": "получатель", "amount": 100}}<br>
+response = requests.post(f"{{base_url}}/transfer", headers=headers, json=data)<br>
+print(response.json())
+                                </div>
+                                
+                                <p>cURL:</p>
+                                <div class="code-block">
+# Получить баланс<br>
+curl -H "X-API-Key: ваш_api_ключ" http://ваш-домен/api/v1/balance<br>
+<br>
+# Сделать перевод<br>
+curl -X POST -H "X-API-Key: ваш_api_ключ" \\<br>
+     -H "Content-Type: application/json" \\<br>
+     -d '{{"target": "получатель", "amount": 100}}' \\<br>
+     http://ваш-домен/api/v1/transfer
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+
+    <!-- Модальные окна -->
+    <div class="modal fade" id="depositModal" tabindex="-1">
+        <div class="modal-dialog">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h5 class="modal-title"><i class="fas fa-piggy-bank me-2"></i>Вклад</h5>
+                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
+                </div>
+                <form action="/deposit" method="post">
+                    <div class="modal-body">
+                        <div class="mb-3">
+                            <label class="form-label">Сумма вклада ($)</label>
+                            <input type="number" name="amount" class="form-control" min="1" required>
+                        </div>
+                    </div>
+                    <div class="modal-footer">
+                        <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Отмена</button>
+                        <button type="submit" class="btn btn-primary">Подтвердить</button>
+                    </div>
+                </form>
+            </div>
+        </div>
+    </div>
+
+    <div class="modal fade" id="creditModal" tabindex="-1">
+        <div class="modal-dialog">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h5 class="modal-title"><i class="fas fa-credit-card me-2"></i>Кредит</h5>
+                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
+                </div>
+                <form action="/credit" method="post">
+                    <div class="modal-body">
+                        <div class="alert alert-warning">
+                            <i class="fas fa-exclamation-triangle me-2"></i>
+                            Кредит выдается под 5% ежедневно
+                        </div>
+                        <div class="mb-3">
+                            <label class="form-label">Сумма кредита ($)</label>
+                            <input type="number" name="amount" class="form-control" min="1" required>
+                        </div>
+                    </div>
+                    <div class="modal-footer">
+                        <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Отмена</button>
+                        <button type="submit" class="btn btn-primary">Взять кредит</button>
+                    </div>
+                </form>
+            </div>
+        </div>
+    </div>
+
+    <div class="modal fade" id="transferModal" tabindex="-1">
+        <div class="modal-dialog">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h5 class="modal-title"><i class="fas fa-exchange-alt me-2"></i>Перевод</h5>
+                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
+                </div>
+                <form action="/transfer" method="post">
+                    <div class="modal-body">
+                        <div class="mb-3">
+                            <label class="form-label">Получатель</label>
+                            <input type="text" name="target" class="form-control" required>
+                        </div>
+                        <div class="mb-3">
+                            <label class="form-label">Сумма ($)</label>
+                            <input type="number" name="amount" class="form-control" min="1" required>
+                        </div>
+                    </div>
+                    <div class="modal-footer">
+                        <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Отмена</button>
+                        <button type="submit" class="btn btn-primary">Отправить</button>
+                    </div>
+                </form>
+            </div>
+        </div>
+    </div>
+
+    <div class="modal fade" id="cardModal" tabindex="-1">
+        <div class="modal-dialog">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h5 class="modal-title"><i class="fas fa-credit-card me-2"></i>Создание карты</h5>
+                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
+                </div>
+                <form action="/create_card" method="post">
+                    <div class="modal-body">
+                        <div class="mb-3">
+                            <label class="form-label">Тип карты</label>
+                            <select name="card_type" class="form-select">
+                                <option value="standard">Стандартная (бесплатно)</option>
+                                <option value="gold">Золотая ($50)</option>
+                                <option value="platinum">Платиновая ($100)</option>
+                            </select>
+                        </div>
+                    </div>
+                    <div class="modal-footer">
+                        <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Отмена</button>
+                        <button type="submit" class="btn btn-primary">Создать карту</button>
+                    </div>
+                </form>
+            </div>
+        </div>
+    </div>
+
+    <!-- Модальные окна для магазина -->
+    <div class="modal fade" id="addItemModal" tabindex="-1">
+        <div class="modal-dialog">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h5 class="modal-title"><i class="fas fa-plus me-2"></i>Добавить товар</h5>
+                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
+                </div>
+                <form action="/create_shop_item" method="post">
+                    <div class="modal-body">
+                        <div class="mb-3">
+                            <label class="form-label">Название товара</label>
+                            <input type="text" name="title" class="form-control" required>
+                        </div>
+                        <div class="mb-3">
+                            <label class="form-label">Описание</label>
+                            <textarea name="description" class="form-control" rows="3" required></textarea>
+                        </div>
+                        <div class="mb-3">
+                            <label class="form-label">Цена ($)</label>
+                            <input type="number" name="price" class="form-control" min="1" required>
+                        </div>
+                        <div class="mb-3">
+                            <label class="form-label">Категория</label>
+                            <select name="category" class="form-select">
+                                <option value="electronics">Электроника</option>
+                                <option value="clothing">Одежда</option>
+                                <option value="books">Книги</option>
+                                <option value="other">Другое</option>
+                            </select>
+                        </div>
+                    </div>
+                    <div class="modal-footer">
+                        <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Отмена</button>
+                        <button type="submit" class="btn btn-primary">Добавить товар</button>
+                    </div>
+                </form>
+            </div>
+        </div>
+    </div>
+
+    <div class="modal fade" id="addAdModal" tabindex="-1">
+        <div class="modal-dialog">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h5 class="modal-title"><i class="fas fa-bullhorn me-2"></i>Добавить объявление</h5>
+                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
+                </div>
+                <form action="/create_advertisement" method="post">
+                    <div class="modal-body">
+                        <div class="mb-3">
+                            <label class="form-label">Заголовок</label>
+                            <input type="text" name="title" class="form-control" required>
+                        </div>
+                        <div class="mb-3">
+                            <label class="form-label">Содержание</label>
+                            <textarea name="content" class="form-control" rows="3" required></textarea>
+                        </div>
+                        <div class="mb-3">
+                            <label class="form-label">Контактная информация</label>
+                            <input type="text" name="contact_info" class="form-control" placeholder="Email или телефон" required>
+                        </div>
+                    </div>
+                    <div class="modal-footer">
+                        <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Отмена</button>
+                        <button type="submit" class="btn btn-primary">Добавить объявление</button>
+                    </div>
+                </form>
+            </div>
+        </div>
+    </div>
+
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js"></script>
+    <script>
+        // Автообновление каждые 60 секунд
+        setInterval(() => {{
+            window.location.reload();
+        }}, 60000);
+        
+        // Валидация форм
+        document.querySelectorAll("form").forEach(form => {{
+            form.addEventListener("submit", function(e) {{
+                const inputs = this.querySelectorAll("input[type=\"number\"]");
+                inputs.forEach(input => {{
+                    if (input.value && parseFloat(input.value) <= 0) {{
+                        e.preventDefault();
+                        alert("Пожалуйста, введите корректное значение");
+                    }}
+                }});
+            }});
+        }});
+        
+        // Анимация карт
+        document.querySelectorAll(".bank-card").forEach(card => {{
+            card.addEventListener("mouseenter", function() {{
+                this.style.transform = "translateY(-5px)";
+                this.style.boxShadow = "0 15px 35px rgba(0,0,0,0.3)";
+            }});
+            
+            card.addEventListener("mouseleave", function() {{
+                this.style.transform = "translateY(0)";
+                this.style.boxShadow = "0 10px 25px rgba(0,0,0,0.2)";
+            }});
+        }});
+        
+        // Копирование API ключа
+        function copyApiKey() {{
+            const apiKeyInput = document.getElementById("apiKey");
+            apiKeyInput.select();
+            apiKeyInput.setSelectionRange(0, 99999);
+            document.execCommand("copy");
+            alert("API ключ скопирован в буфер обмена!");
+        }}
+    </script>
+</body>
+</html>
+'''
+
+def render_admin_panel(users):
+    """Генерация HTML админ-панели - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    users_html = ""
+    current_user = session.get('user')
+    
+    valid_users_count = 0
+    total_balance = 0
+    total_deposit = 0
+    total_credit = 0
+    
+    for username, user in users.items():
+        # Пропускаем текущего пользователя
+        if username == current_user:
+            continue
+        
+        # Проверяем, что пользователь - словарь (корректные данные)
+        if not isinstance(user, dict):
+            continue
+        
+        # Безопасно получаем данные пользователя
+        role = user.get('role', 'client')
+        balance = user.get('balance', 0)
+        deposit = user.get('deposit', 0)
+        credit = user.get('credit', 0)
+        email = user.get('email', 'нет')
+        
+        # Обновляем статистику
+        valid_users_count += 1
+        total_balance += balance
+        total_deposit += deposit
+        total_credit += credit
+        
+        # Определяем цвет бейджа роли
+        badge_color = "success" if role == 'admin' else "primary" if role == 'manager' else "secondary"
+        
+        users_html += f'''
+        <div class="col-md-6 col-lg-4">
+            <div class="card h-100">
+                <div class="card-body">
+                    <h5 class="card-title">{username}</h5>
+                    <p class="card-text">
+                        <small>Роль: <span class="badge bg-{badge_color}">{role}</span></small><br>
+                        <small>Баланс: <strong>${balance:,}</strong></small><br>
+                        <small>Вклад: <strong>${deposit:,}</strong></small><br>
+                        <small>Кредит: <strong>${credit:,}</strong></small><br>
+                        <small>Email: {email}</small>
+                    </p>
+                    <form action="/admin/change_role" method="post" class="mb-2">
+                        <input type="hidden" name="username" value="{username}">
+                        <select name="role" class="form-select form-select-sm mb-2">
+                            <option value="client" {'selected' if role == 'client' else ''}>Клиент</option>
+                            <option value="admin" {'selected' if role == 'admin' else ''}>Админ</option>
+                            <option value="manager" {'selected' if role == 'manager' else ''}>Менеджер</option>
+                        </select>
+                        <button type="submit" class="btn btn-warning btn-sm w-100">Изменить роль</button>
+                    </form>
+                    <form action="/admin/add_money" method="post">
+                        <input type="hidden" name="username" value="{username}">
+                        <div class="input-group input-group-sm mb-2">
+                            <input type="number" name="amount" class="form-control" placeholder="Сумма" min="1" required>
+                            <button class="btn btn-success" type="submit">+</button>
+                        </div>
+                    </form>
+                </div>
+            </div>
+        </div>
+        '''
+    
+    return f'''
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Админ-панель</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <style>
+        :root {{
+            --primary: #4361ee;
+            --gradient: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+        }}
+        body {{
+            background: #f5f7fb;
+            padding: 20px;
+        }}
+        .admin-header {{
+            background: var(--gradient);
+            color: white;
+            border-radius: 15px;
+            padding: 20px;
+            margin-bottom: 20px;
+        }}
+        .card {{
+            border-radius: 12px;
+            box-shadow: 0 3px 10px rgba(0,0,0,0.05);
+        }}
+        .stat-card {{
+            background: white;
+            border-radius: 12px;
+            padding: 15px;
+            box-shadow: 0 3px 10px rgba(0,0,0,0.05);
+            border-left: 4px solid var(--primary);
+            margin-bottom: 15px;
+        }}
+    </style>
+</head>
+<body>
+    <div class="container">
+        <div class="admin-header">
+            <div class="d-flex justify-content-between align-items-center">
+                <div>
+                    <h2><i class="fas fa-cogs me-2"></i>Админ-панель</h2>
+                    <p class="mb-0">Управление пользователями</p>
+                </div>
+                <a href="/dashboard" class="btn btn-light">
+                    <i class="fas fa-arrow-left me-1"></i>Назад
+                </a>
+            </div>
+        </div>
+        
+        <div class="row g-4">
+            {users_html if users_html else '''
+            <div class="col-12">
+                <div class="alert alert-info">
+                    <i class="fas fa-info-circle me-2"></i>
+                    Нет других пользователей для управления.
+                </div>
+            </div>
+            '''}
+        </div>
+        
+        <div class="row mt-4">
+            <div class="col-12">
+                <div class="card">
+                    <div class="card-body">
+                        <h5 class="card-title"><i class="fas fa-chart-bar me-2"></i>Статистика системы</h5>
+                        <div class="row">
+                            <div class="col-md-3">
+                                <div class="stat-card">
+                                    <h6>Всего пользователей</h6>
+                                    <h4>{valid_users_count + 1}</h4>
+                                </div>
+                            </div>
+                            <div class="col-md-3">
+                                <div class="stat-card">
+                                    <h6>Общий баланс</h6>
+                                    <h4 class="text-success">${total_balance:,}</h4>
+                                </div>
+                            </div>
+                            <div class="col-md-3">
+                                <div class="stat-card">
+                                    <h6>Общие вклады</h6>
+                                    <h4 class="text-info">${total_deposit:,}</h4>
+                                </div>
+                            </div>
+                            <div class="col-md-3">
+                                <div class="stat-card">
+                                    <h6>Общие кредиты</h6>
+                                    <h4 class="text-danger">${total_credit:,}</h4>
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js"></script>
+    <script>
+        // Валидация форм админ-панели
+        document.querySelectorAll("form").forEach(form => {{
+            form.addEventListener("submit", function(e) {{
+                const amountInput = this.querySelector('input[type="number"]');
+                if (amountInput && amountInput.value) {{
+                    if (parseInt(amountInput.value) <= 0) {{
+                        e.preventDefault();
+                        alert("Сумма должна быть положительной!");
+                    }}
+                }}
+            }});
+        }});
+    </script>
+</body>
+</html>
+'''
+
+# ---------- СТРАНИЦА ОПЛАТЫ ----------
+def render_payment_page():
+    """Страница оплаты"""
+    return '''
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Оплата | Банковская система</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <style>
+        :root {
+            --primary: #4361ee;
+            --secondary: #3a0ca3;
+            --gradient: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+        }
+        body {
+            background: #f5f7fb;
+            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
+        }
+        .payment-card {
+            background: white;
+            border-radius: 15px;
+            box-shadow: 0 10px 30px rgba(0,0,0,0.1);
+            overflow: hidden;
+        }
+        .payment-header {
+            background: var(--gradient);
+            color: white;
+            padding: 25px;
+            text-align: center;
+        }
+        .payment-body {
+            padding: 30px;
+        }
+        .form-control {
+            border: 2px solid #e9ecef;
+            border-radius: 10px;
+            padding: 12px 15px;
+            transition: all 0.3s;
+        }
+        .form-control:focus {
+            border-color: var(--primary);
+            box-shadow: 0 0 0 0.25rem rgba(67, 97, 238, 0.25);
+        }
+        .btn-primary {
+            background: var(--gradient);
+            border: none;
+            border-radius: 10px;
+            padding: 12px;
+            font-weight: 600;
+            transition: all 0.3s;
+        }
+        .btn-primary:hover {
+            transform: translateY(-2px);
+            box-shadow: 0 10px 20px rgba(67, 97, 238, 0.3);
+        }
+        .api-example {
+            background: #f8f9fa;
+            border-radius: 10px;
+            padding: 15px;
+            font-family: 'Courier New', monospace;
+            font-size: 14px;
+            margin: 10px 0;
+        }
+        .qr-code {
+            width: 200px;
+            height: 200px;
+            background: #f8f9fa;
+            border-radius: 10px;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            margin: 20px auto;
+            border: 1px solid #dee2e6;
+        }
+        .payment-link {
+            background: #e9ecef;
+            border-radius: 8px;
+            padding: 10px;
+            word-break: break-all;
+            font-family: 'Courier New', monospace;
+            margin: 10px 0;
+        }
+    </style>
+</head>
+<body>
+    <nav class="navbar navbar-expand-lg navbar-dark" style="background: var(--gradient);">
+        <div class="container">
+            <a class="navbar-brand" href="/dashboard">
+                <i class="fas fa-university me-2"></i>
+                Банк | Оплата
+            </a>
+            <div>
+                <a href="/dashboard" class="btn btn-outline-light btn-sm">
+                    <i class="fas fa-arrow-left me-1"></i> Назад
+                </a>
+            </div>
+        </div>
+    </nav>
+
+    <div class="container mt-4 mb-5">
+        <div class="row justify-content-center">
+            <div class="col-lg-8">
+                <div class="payment-card">
+                    <div class="payment-header">
+                        <h3><i class="fas fa-credit-card me-2"></i>Платежная система</h3>
+                        <p class="mb-0">Принимайте платежи от клиентов через ссылки или API</p>
+                    </div>
+                    <div class="payment-body">
+                        <div class="row">
+                            <div class="col-md-6">
+                                <h4><i class="fas fa-link me-2"></i>Создать ссылку для оплаты</h4>
+                                <form action="/create_payment_link" method="post" id="paymentForm">
+                                    <div class="mb-3">
+                                        <label class="form-label">Получатель (логин)</label>
+                                        <input type="text" name="receiver" class="form-control" required 
+                                               placeholder="Введите логин получателя">
+                                    </div>
+                                    <div class="mb-3">
+                                        <label class="form-label">Сумма ($)</label>
+                                        <input type="number" name="amount" class="form-control" min="1" required 
+                                               placeholder="Введите сумму">
+                                    </div>
+                                    <div class="mb-3">
+                                        <label class="form-label">Описание платежа</label>
+                                        <input type="text" name="description" class="form-control" 
+                                               placeholder="Оплата за товар/услугу">
+                                    </div>
+                                    <button type="submit" class="btn btn-primary w-100">
+                                        <i class="fas fa-link me-2"></i>Создать ссылку
+                                    </button>
+                                </form>
+                                
+                                <div class="mt-4">
+                                    <h5><i class="fas fa-qrcode me-2"></i>QR-код для оплаты</h5>
+                                    <div class="qr-code" id="qrCode">
+                                        <span class="text-muted">QR-код появится после создания ссылки</span>
+                                    </div>
+                                </div>
+                            </div>
+                            
+                            <div class="col-md-6">
+                                <h4><i class="fas fa-code me-2"></i>API для оплаты</h4>
+                                <p>Используйте API для интеграции платежей в ваши приложения:</p>
+                                
+                                <h6>1. Создать платеж:</h6>
+                                <div class="api-example">
+                                    POST /api/v1/payment/create<br>
+                                    Headers: X-API-Key: ваш_ключ<br>
+                                    Body: {<br>
+                                      "receiver": "username",<br>
+                                      "amount": 100,<br>
+                                      "description": "Оплата за услугу"<br>
+                                    }
+                                </div>
+                                
+                                <h6>2. Получить статус платежа:</h6>
+                                <div class="api-example">
+                                    GET /api/v1/payment/status/{payment_id}<br>
+                                    Headers: X-API-Key: ваш_ключ
+                                </div>
+                                
+                                <h6>3. Пример ссылки для оплаты:</h6>
+                                <div class="payment-link" id="paymentLinkExample">
+                                    http://ваш-домен/pay/{payment_id}
+                                </div>
+                                
+                                <div class="alert alert-info mt-3">
+                                    <h6><i class="fas fa-lightbulb me-2"></i>Как это работает:</h6>
+                                    <ol class="mb-0">
+                                        <li>Создаете платеж через форму или API</li>
+                                        <li>Получаете уникальную ссылку или payment_id</li>
+                                        <li>Отправляете ссылку клиенту</li>
+                                        <li>Клиент переходит по ссылке и оплачивает</li>
+                                        <li>Вы получаете деньги на счет</li>
+                                    </ol>
+                                </div>
+                            </div>
+                        </div>
+                        
+                        <div class="mt-5">
+                            <h4><i class="fas fa-history me-2"></i>Последние платежи</h4>
+                            <div class="table-responsive">
+                                <table class="table table-hover" id="paymentsTable">
+                                    <thead>
+                                        <tr>
+                                            <th>ID</th>
+                                            <th>Сумма</th>
+                                            <th>Получатель</th>
+                                            <th>Статус</th>
+                                            <th>Дата</th>
+                                        </tr>
+                                    </thead>
+                                    <tbody>
+                                        <!-- Данные будут загружены через JavaScript -->
+                                    </tbody>
+                                </table>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js"></script>
+    <script>
+        // Обработка формы создания платежа
+        document.getElementById('paymentForm').addEventListener('submit', async function(e) {
+            e.preventDefault();
+            
+            const formData = new FormData(this);
+            
+            try {
+                const response = await fetch('/api/v1/payment/create', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify({
+                        receiver: formData.get('receiver'),
+                        amount: parseInt(formData.get('amount')),
+                        description: formData.get('description')
+                    })
+                });
+                
+                const result = await response.json();
+                
+                if (result.success) {
+                    // Обновляем пример ссылки
+                    const paymentLink = window.location.origin + '/pay/' + result.payment_id;
+                    document.getElementById('paymentLinkExample').textContent = paymentLink;
+                    
+                    // Показываем QR-код (простая визуализация)
+                    const qrCodeDiv = document.getElementById('qrCode');
+                    qrCodeDiv.innerHTML = `
+                        <div class="text-center">
+                            <div style="font-size: 80px;">💰</div>
+                            <small class="text-muted">Ссылка: ${result.payment_id}</small>
+                        </div>
+                    `;
+                    
+                    alert('Платеж создан! ID: ' + result.payment_id);
+                    
+                    // Обновляем список платежей
+                    loadPayments();
+                } else {
+                    alert('Ошибка: ' + result.error);
+                }
+            } catch (error) {
+                alert('Ошибка соединения: ' + error.message);
+            }
+        });
+        
+        // Загрузка списка платежей
+        async function loadPayments() {
+            try {
+                const response = await fetch('/api/v1/payment/list');
+                const result = await response.json();
+                
+                if (result.success) {
+                    const tbody = document.querySelector('#paymentsTable tbody');
+                    tbody.innerHTML = '';
+                    
+                    result.payments.forEach(payment => {
+                        const row = document.createElement('tr');
+                        
+                        // Определяем цвет статуса
+                        let statusClass = 'warning';
+                        if (payment.status === 'completed') statusClass = 'success';
+                        if (payment.status === 'failed') statusClass = 'danger';
+                        if (payment.status === 'cancelled') statusClass = 'secondary';
+                        
+                        const date = new Date(payment.created * 1000).toLocaleString();
+                        
+                        row.innerHTML = `
+                            <td><small>${payment.id}</small></td>
+                            <td><strong>$${payment.amount}</strong></td>
+                            <td>${payment.receiver}</td>
+                            <td><span class="badge bg-${statusClass}">${payment.status}</span></td>
+                            <td><small>${date}</small></td>
+                        `;
+                        
+                        tbody.appendChild(row);
+                    });
+                }
+            } catch (error) {
+                console.error('Ошибка загрузки платежей:', error);
+            }
+        }
+        
+        // Загружаем платежи при загрузке страницы
+        document.addEventListener('DOMContentLoaded', loadPayments);
+    </script>
+</body>
+</html>
+'''
+
+def render_pay_page(payment_id):
+    """Страница оплаты для клиента"""
+    payments = load_payments()
+    
+    payment = None
+    for p in payments:
+        if p["id"] == payment_id:
+            payment = p
+            break
+    
+    if not payment:
+        return '''
+        <!DOCTYPE html>
+        <html>
+        <head>
+            <title>Платеж не найден</title>
+            <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
+        </head>
+        <body>
+            <div class="container mt-5">
+                <div class="alert alert-danger">
+                    <h4>Платеж не найден</h4>
+                    <p>Проверьте правильность ссылки или обратитесь к отправителю.</p>
+                    <a href="/" class="btn btn-primary">На главную</a>
+                </div>
+            </div>
+        </body>
+        </html>
+        '''
+    
+    if payment["status"] != "pending":
+        status_message = {
+            "completed": "Оплачен",
+            "failed": "Не удался",
+            "cancelled": "Отменен"
+        }.get(payment["status"], "Неизвестен")
+        
+        return f'''
+        <!DOCTYPE html>
+        <html>
+        <head>
+            <title>Статус платежа</title>
+            <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
+            <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+        </head>
+        <body>
+            <div class="container mt-5">
+                <div class="row justify-content-center">
+                    <div class="col-md-6">
+                        <div class="card">
+                            <div class="card-body text-center">
+                                <h2>Платеж {status_message}</h2>
+                                <div class="my-4">
+                                    <i class="fas fa-{ 'check-circle text-success' if payment['status'] == 'completed' else 'times-circle text-danger' } fa-5x"></i>
+                                </div>
+                                <p>ID платежа: <strong>{payment_id}</strong></p>
+                                <p>Сумма: <strong>${payment['amount']}</strong></p>
+                                <p>Получатель: <strong>{payment['receiver']}</strong></p>
+                                <p>Описание: {payment['description']}</p>
+                                <a href="/" class="btn btn-primary mt-3">На главную</a>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </body>
+        </html>
+        '''
+    
+    return f'''
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Оплата #{payment_id}</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <style>
+        :root {{
+            --primary: #4361ee;
+            --gradient: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+        }}
+        body {{
+            background: #f5f7fb;
+            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
+        }}
+        .payment-container {{
+            max-width: 500px;
+            margin: 50px auto;
+        }}
+        .payment-card {{
+            background: white;
+            border-radius: 15px;
+            box-shadow: 0 10px 30px rgba(0,0,0,0.1);
+            overflow: hidden;
+        }}
+        .payment-header {{
+            background: var(--gradient);
+            color: white;
+            padding: 25px;
+            text-align: center;
+        }}
+        .payment-body {{
+            padding: 30px;
+        }}
+        .amount-display {{
+            font-size: 48px;
+            font-weight: bold;
+            color: var(--primary);
+            text-align: center;
+            margin: 20px 0;
+        }}
+        .btn-pay {{
+            background: var(--gradient);
+            border: none;
+            border-radius: 10px;
+            padding: 15px;
+            font-size: 18px;
+            font-weight: 600;
+            width: 100%;
+            margin-top: 20px;
+        }}
+    </style>
+</head>
+<body>
+    <div class="payment-container">
+        <div class="payment-card">
+            <div class="payment-header">
+                <h3><i class="fas fa-credit-card me-2"></i>Оплата</h3>
+                <p class="mb-0">ID: {payment_id}</p>
+            </div>
+            <div class="payment-body">
+                <div class="text-center mb-4">
+                    <i class="fas fa-shopping-cart fa-4x text-primary"></i>
+                </div>
+                
+                <div class="amount-display">
+                    ${payment['amount']}
+                </div>
+                
+                <div class="payment-details">
+                    <div class="d-flex justify-content-between mb-2">
+                        <span>Получатель:</span>
+                        <strong>{payment['receiver']}</strong>
+                    </div>
+                    <div class="d-flex justify-content-between mb-2">
+                        <span>Описание:</span>
+                        <strong>{payment['description'] or 'Нет описания'}</strong>
+                    </div>
+                    <div class="d-flex justify-content-between mb-4">
+                        <span>Статус:</span>
+                        <span class="badge bg-warning">Ожидает оплаты</span>
+                    </div>
+                </div>
+                
+                <form action="/process_payment/{payment_id}" method="post" id="paymentForm">
+                    <div class="mb-3">
+                        <label class="form-label">Ваш логин</label>
+                        <input type="text" name="username" class="form-control" placeholder="Введите ваш логин" required>
+                    </div>
+                    <div class="mb-3">
+                        <label class="form-label">Пароль</label>
+                        <input type="password" name="password" class="form-control" placeholder="Введите пароль" required>
+                    </div>
+                    
+                    <button type="submit" class="btn btn-pay">
+                        <i class="fas fa-lock me-2"></i>Оплатить ${payment['amount']}
+                    </button>
+                    
+                    <div class="text-center mt-3">
+                        <small class="text-muted">После оплаты средства будут переведены получателю</small>
+                    </div>
+                </form>
+                
+                <div class="alert alert-info mt-4">
+                    <h6><i class="fas fa-info-circle me-2"></i>Безопасная оплата</h6>
+                    <p class="mb-0 small">Все платежи защищены банковской системой. Для оплаты требуется авторизация.</p>
+                </div>
+            </div>
+        </div>
+    </div>
+    
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js"></script>
+    <script>
+        document.getElementById('paymentForm').addEventListener('submit', function(e) {{
+            const submitBtn = this.querySelector('button[type="submit"]');
+            submitBtn.disabled = true;
+            submitBtn.innerHTML = '<i class="fas fa-spinner fa-spin me-2"></i>Обработка...';
+        }});
+    </script>
+</body>
+</html>
+'''
+
+# ---------- ИСПРАВЛЕННЫЕ API МАРШРУТЫ ----------
+
+@app.route('/api/v1/balance', methods=['GET'])
+@api_key_required
+def api_balance():
+    """API: Получить информацию о балансе - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        user_data = request.user_data
+        return jsonify({
+            'success': True,
+            'username': request.username,
+            'balance': user_data.get('balance', 0),
+            'deposit': user_data.get('deposit', 0),
+            'credit': user_data.get('credit', 0),
+            'total': user_data.get('balance', 0) + user_data.get('deposit', 0) - user_data.get('credit', 0)
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/history', methods=['GET'])
+@api_key_required
+def api_history():
+    """API: Получить историю операций - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        history = load_history()
+        user_history = [h for h in history if h['user'] == request.username]
+        
+        limit = request.args.get('limit', type=int, default=50)
+        if limit > 0 and limit < len(user_history):
+            user_history = user_history[-limit:]
+        
+        for h in user_history:
+            h['time_formatted'] = datetime.fromtimestamp(h['time']).strftime('%Y-%m-%d %H:%M:%S')
+        
+        return jsonify({
+            'success': True,
+            'count': len(user_history),
+            'history': user_history[::-1]
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/cards', methods=['GET'])
+@api_key_required
+def api_cards():
+    """API: Получить список карт - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        cards = get_user_cards(request.username)
+        
+        safe_cards = []
+        for card in cards:
+            safe_card = card.copy()
+            if 'number' in safe_card and len(safe_card['number']) > 4:
+                safe_card['number_masked'] = '**** **** **** ' + safe_card['number'][-4:]
+            safe_card['cvv'] = '***'
+            safe_cards.append(safe_card)
+        
+        return jsonify({
+            'success': True,
+            'count': len(safe_cards),
+            'cards': safe_cards
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/deposit', methods=['POST'])
+@api_key_required
+def api_deposit():
+    """API: Открыть вклад - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        if not request.is_json:
+            return jsonify({'success': False, 'error': 'JSON data required'}), 400
+            
+        data = request.get_json()
+        amount = data.get('amount')
+        
+        if not amount:
+            return jsonify({'success': False, 'error': 'Amount required'}), 400
+        
+        amount = int(amount)
+        if amount <= 0:
+            return jsonify({'success': False, 'error': 'Amount must be positive'}), 400
+        
+        users = load_users()
+        user = users.get(request.username)
+        
+        if not user or user['balance'] < amount:
+            return jsonify({'success': False, 'error': 'Insufficient funds'}), 400
+        
+        user['balance'] -= amount
+        user['deposit'] += amount
+        save_users(users)
+        
+        add_history(request.username, 'api_deposit', amount)
+        
+        return jsonify({
+            'success': True,
+            'message': f'Deposit of ${amount} created successfully',
+            'new_balance': user['balance'],
+            'new_deposit': user['deposit']
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/credit', methods=['POST'])
+@api_key_required
+def api_credit():
+    """API: Взять кредит - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        if not request.is_json:
+            return jsonify({'success': False, 'error': 'JSON data required'}), 400
+            
+        data = request.get_json()
+        amount = data.get('amount')
+        
+        if not amount:
+            return jsonify({'success': False, 'error': 'Amount required'}), 400
+        
+        amount = int(amount)
+        if amount <= 0:
+            return jsonify({'success': False, 'error': 'Amount must be positive'}), 400
+        
+        users = load_users()
+        user = users.get(request.username)
+        
+        if not user:
+            return jsonify({'success': False, 'error': 'User not found'}), 404
+        
+        user['balance'] += amount
+        user['credit'] += amount
+        save_users(users)
+        
+        add_history(request.username, 'api_credit', amount)
+        
+        return jsonify({
+            'success': True,
+            'message': f'Credit of ${amount} taken successfully',
+            'new_balance': user['balance'],
+            'new_credit': user['credit']
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/transfer', methods=['POST'])
+@api_key_required
+def api_transfer():
+    """API: Сделать перевод - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        if not request.is_json:
+            return jsonify({'success': False, 'error': 'JSON data required'}), 400
+            
+        data = request.get_json()
+        target = data.get('target', '').strip()
+        amount = data.get('amount')
+        
+        if not target:
+            return jsonify({'success': False, 'error': 'Target username required'}), 400
+        
+        if not amount:
+            return jsonify({'success': False, 'error': 'Amount required'}), 400
+        
+        amount = int(amount)
+        if amount <= 0:
+            return jsonify({'success': False, 'error': 'Amount must be positive'}), 400
+        
+        users = load_users()
+        
+        if target not in users:
+            return jsonify({'success': False, 'error': 'Target user not found'}), 404
+        
+        if target == request.username:
+            return jsonify({'success': False, 'error': 'Cannot transfer to yourself'}), 400
+        
+        sender = users.get(request.username)
+        if not sender:
+            return jsonify({'success': False, 'error': 'Sender not found'}), 404
+        
+        if sender['balance'] < amount:
+            return jsonify({'success': False, 'error': 'Insufficient funds'}), 400
+        
+        sender['balance'] -= amount
+        users[target]['balance'] += amount
+        save_users(users)
+        
+        add_history(request.username, 'api_transfer', amount, target)
+        
+        return jsonify({
+            'success': True,
+            'message': f'Transfer of ${amount} to {target} successful',
+            'new_balance': sender['balance']
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/cards/create', methods=['POST'])
+@api_key_required
+def api_create_card():
+    """API: Создать карту - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        if not request.is_json:
+            return jsonify({'success': False, 'error': 'JSON data required'}), 400
+            
+        data = request.get_json()
+        card_type = data.get('card_type', 'standard')
+        
+        if card_type not in ['standard', 'gold', 'platinum']:
+            return jsonify({'success': False, 'error': 'Invalid card type'}), 400
+        
+        users = load_users()
+        user = users.get(request.username)
+        
+        if not user:
+            return jsonify({'success': False, 'error': 'User not found'}), 404
+        
+        costs = {'standard': 0, 'gold': 50, 'platinum': 100}
+        cost = costs.get(card_type, 0)
+        
+        if user['balance'] < cost:
+            return jsonify({'success': False, 'error': 'Insufficient funds'}), 400
+        
+        if cost > 0:
+            user['balance'] -= cost
+            save_users(users)
+        
+        card = create_user_card(request.username, user, card_type)
+        
+        if not card:
+            if cost > 0:
+                user['balance'] += cost
+                save_users(users)
+            return jsonify({'success': False, 'error': 'Card creation failed. Maximum cards limit reached?'}), 400
+        
+        safe_card = card.copy()
+        if 'number' in safe_card and len(safe_card['number']) > 4:
+            safe_card['number_masked'] = '**** **** **** ' + safe_card['number'][-4:]
+        safe_card['cvv'] = '***'
+        
+        return jsonify({
+            'success': True,
+            'message': f'{card_type.capitalize()} card created successfully',
+            'card': safe_card,
+            'cost': cost,
+            'new_balance': user['balance']
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/cards/delete', methods=['POST'])
+@api_key_required
+def api_delete_card():
+    """API: Удалить карту - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        if not request.is_json:
+            return jsonify({'success': False, 'error': 'JSON data required'}), 400
+            
+        data = request.get_json()
+        card_id = data.get('card_id')
+        
+        if not card_id:
+            return jsonify({'success': False, 'error': 'Card ID required'}), 400
+        
+        cards = load_cards()
+        user_cards = cards.get(request.username, [])
+        
+        card_to_delete = None
+        for card in user_cards:
+            if card['id'] == card_id:
+                card_to_delete = card
+                break
+        
+        if not card_to_delete:
+            return jsonify({'success': False, 'error': 'Card not found'}), 404
+        
+        cards[request.username] = [c for c in user_cards if c['id'] != card_id]
+        save_cards(cards)
+        
+        add_history(request.username, 'api_delete_card', 0, f"Card {card_to_delete['number'][-4:]}")
+        
+        return jsonify({
+            'success': True,
+            'message': f"Card ending with {card_to_delete['number'][-4:]} deleted successfully"
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+# ---------- API ДЛЯ ПЛАТЕЖЕЙ ----------
+
+@app.route('/api/v1/payment/create', methods=['POST'])
+@api_key_required
+def api_payment_create():
+    """API: Создать платеж"""
+    try:
+        if not request.is_json:
+            return jsonify({'success': False, 'error': 'JSON data required'}), 400
+            
+        data = request.get_json()
+        receiver = data.get('receiver')
+        amount = data.get('amount')
+        description = data.get('description', '')
+        external_id = data.get('external_id', '')
+        
+        if not receiver:
+            return jsonify({'success': False, 'error': 'Receiver required'}), 400
+        
+        if not amount:
+            return jsonify({'success': False, 'error': 'Amount required'}), 400
+        
+        try:
+            amount_int = int(amount)
+            if amount_int <= 0:
+                return jsonify({'success': False, 'error': 'Amount must be positive'}), 400
+        except:
+            return jsonify({'success': False, 'error': 'Invalid amount'}), 400
+        
+        # Проверяем существование получателя
+        users = load_users()
+        if receiver not in users:
+            return jsonify({'success': False, 'error': 'Receiver not found'}), 404
+        
+        # Создаем платеж
+        payment_id, payment_data = create_payment(
+            payer=request.username,
+            receiver=receiver,
+            amount=amount_int,
+            description=description,
+            external_id=external_id
+        )
+        
+        return jsonify({
+            'success': True,
+            'message': 'Payment created successfully',
+            'payment_id': payment_id,
+            'payment': payment_data,
+            'payment_url': f'/pay/{payment_id}'
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/payment/process', methods=['POST'])
+@api_key_required
+def api_payment_process():
+    """API: Выполнить платеж"""
+    try:
+        if not request.is_json:
+            return jsonify({'success': False, 'error': 'JSON data required'}), 400
+            
+        data = request.get_json()
+        payment_id = data.get('payment_id')
+        
+        if not payment_id:
+            return jsonify({'success': False, 'error': 'Payment ID required'}), 400
+        
+        success, message = process_payment(payment_id, request.username)
+        
+        return jsonify({
+            'success': success,
+            'message': message
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/payment/status/<payment_id>', methods=['GET'])
+@api_key_required
+def api_payment_status(payment_id):
+    """API: Получить статус платежа"""
+    try:
+        payments = load_payments()
+        
+        payment = None
+        for p in payments:
+            if p["id"] == payment_id:
+                payment = p
+                break
+        
+        if not payment:
+            return jsonify({'success': False, 'error': 'Payment not found'}), 404
+        
+        # Проверяем, имеет ли пользователь доступ к этому платежу
+        if payment["payer"] != request.username and payment["receiver"] != request.username:
+            users = load_users()
+            if users.get(request.username, {}).get('role') != 'admin':
+                return jsonify({'success': False, 'error': 'Access denied'}), 403
+        
+        return jsonify({
+            'success': True,
+            'payment': payment
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/payment/list', methods=['GET'])
+@api_key_required
+def api_payment_list():
+    """API: Получить список платежей пользователя"""
+    try:
+        payments = load_payments()
+        
+        # Фильтруем платежи по пользователю
+        user_payments = []
+        for payment in payments:
+            if payment["payer"] == request.username or payment["receiver"] == request.username:
+                user_payments.append(payment)
+        
+        # Сортируем по дате (новые сверху)
+        user_payments.sort(key=lambda x: x['created'], reverse=True)
+        
+        # Ограничиваем количество
+        limit = min(20, len(user_payments))
+        user_payments = user_payments[:limit]
+        
+        return jsonify({
+            'success': True,
+            'count': len(user_payments),
+            'payments': user_payments
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/shop/items', methods=['GET'])
+@api_key_required
+def api_shop_items():
+    """API: Получить список товаров - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        shop_data = load_shop()
+        available_items = [item for item in shop_data["items"] if item["status"] == "available"]
+        
+        for item in available_items:
+            item['created_formatted'] = datetime.fromtimestamp(item['created']).strftime('%Y-%m-%d %H:%M:%S')
+        
+        return jsonify({
+            'success': True,
+            'count': len(available_items),
+            'items': available_items[::-1]
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/shop/ads', methods=['GET'])
+@api_key_required
+def api_shop_ads():
+    """API: Получить список объявлений - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        shop_data = load_shop()
+        active_ads = [ad for ad in shop_data["ads"] if ad["status"] == "active"]
+        
+        for ad in active_ads:
+            ad['created_formatted'] = datetime.fromtimestamp(ad['created']).strftime('%Y-%m-%d %H:%M:%S')
+        
+        return jsonify({
+            'success': True,
+            'count': len(active_ads),
+            'ads': active_ads[::-1]
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/system/status', methods=['GET'])
+@api_key_required
+def api_system_status():
+    """API: Получить статус системы - ИСПРАВЛЕННАЯ ВЕРСИЯ"""
+    try:
+        users = load_users()
+        valid_users = [u for u in users.values() if isinstance(u, dict)]
+        total_users = len(valid_users)
+        total_balance = sum(u.get('balance', 0) for u in valid_users)
+        total_deposit = sum(u.get('deposit', 0) for u in valid_users)
+        total_credit = sum(u.get('credit', 0) for u in valid_users)
+        
+        return jsonify({
+            'success': True,
+            'system_status': 'operational',
+            'statistics': {
+                'total_users': total_users,
+                'total_balance': total_balance,
+                'total_deposit': total_deposit,
+                'total_credit': total_credit,
+                'net_worth': total_balance + total_deposit - total_credit
+            },
+            'timestamp': int(time.time())
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+# ДОБАВЛЕННЫЕ API ЭНДПОИНТЫ
+
+@app.route('/api/v1/users', methods=['GET'])
+@api_key_required
+def api_users():
+    """API: Получить список пользователей (только для админов)"""
+    try:
+        users = load_users()
+        
+        if not isinstance(request.user_data, dict) or request.user_data.get('role') != 'admin':
+            return jsonify({'success': False, 'error': 'Admin access required'}), 403
+        
+        safe_users = {}
+        for username, user in users.items():
+            if isinstance(user, dict):
+                safe_user = user.copy()
+                safe_user.pop('password', None)
+                safe_users[username] = safe_user
+        
+        return jsonify({
+            'success': True,
+            'count': len(safe_users),
+            'users': safe_users
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/health', methods=['GET'])
+def api_health():
+    """API: Проверка здоровья системы (не требует API ключа)"""
+    try:
+        files = [USERS_FILE, HISTORY_FILE, CARDS_FILE, SHOP_FILE, PAYMENTS_FILE]
+        file_status = {}
+        
+        for file in files:
+            file_status[file] = os.path.exists(file)
+        
+        return jsonify({
+            'status': 'healthy',
+            'timestamp': int(time.time()),
+            'files': file_status,
+            'message': 'System is operational'
+        })
+    except Exception as e:
+        return jsonify({'status': 'unhealthy', 'error': str(e)}), 500
+
+@app.route('/api/v1/shop/create_item', methods=['POST'])
+@api_key_required
+def api_create_shop_item():
+    """API: Создать товар в магазине"""
+    try:
+        if not request.is_json:
+            return jsonify({'success': False, 'error': 'JSON data required'}), 400
+            
+        data = request.get_json()
+        title = data.get('title')
+        description = data.get('description')
+        price = data.get('price')
+        category = data.get('category', 'other')
+        
+        if not title or not description or not price:
+            return jsonify({'success': False, 'error': 'Title, description and price required'}), 400
+        
+        try:
+            price_int = int(price)
+            if price_int <= 0:
+                return jsonify({'success': False, 'error': 'Price must be positive'}), 400
+        except:
+            return jsonify({'success': False, 'error': 'Invalid price'}), 400
+        
+        item_id = create_shop_item(request.username, title, description, price_int, category)
+        
+        return jsonify({
+            'success': True,
+            'message': f'Item "{title}" created successfully',
+            'item_id': item_id
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+@app.route('/api/v1/shop/buy_item', methods=['POST'])
+@api_key_required
+def api_buy_item():
+    """API: Купить товар"""
+    try:
+        if not request.is_json:
+            return jsonify({'success': False, 'error': 'JSON data required'}), 400
+            
+        data = request.get_json()
+        item_id = data.get('item_id')
+        
+        if not item_id:
+            return jsonify({'success': False, 'error': 'Item ID required'}), 400
+        
+        success, message = buy_item(item_id, request.username)
+        
+        return jsonify({
+            'success': success,
+            'message': message
+        })
+    except Exception as e:
+        return jsonify({'success': False, 'error': str(e)}), 500
+
+# ---------- МАГАЗИН МАРШРУТЫ ----------
+@app.route('/create_shop_item', methods=['POST'])
+@login_required
+def create_shop_item_route():
+    """Создание товара в магазине"""
+    title = request.form.get('title')
+    description = request.form.get('description')
+    price = request.form.get('price')
+    category = request.form.get('category', 'other')
+    
+    if not title or not description or not price:
+        return redirect('/dashboard')
+    
+    try:
+        price_int = int(price)
+        if price_int <= 0:
+            return redirect('/dashboard')
+    except:
+        return redirect('/dashboard')
+    
+    item_id = create_shop_item(session['user'], title, description, price_int, category)
+    
+    return redirect('/dashboard')
+
+@app.route('/create_advertisement', methods=['POST'])
+@login_required
+def create_advertisement_route():
+    """Создание объявления"""
+    title = request.form.get('title')
+    content = request.form.get('content')
+    contact_info = request.form.get('contact_info')
+    
+    if not title or not content or not contact_info:
+        return redirect('/dashboard')
+    
+    ad_id = create_advertisement(session['user'], title, content, contact_info)
+    
+    return redirect('/dashboard')
+
+@app.route('/buy_item/<item_id>', methods=['POST'])
+@login_required
+def buy_item_route(item_id):
+    """Покупка товара"""
+    success, message = buy_item(item_id, session['user'])
+    
+    return redirect('/dashboard')
+
+# ---------- ПЛАТЕЖНЫЕ МАРШРУТЫ ----------
+@app.route('/payment_page')
+@login_required
+def payment_page():
+    """Страница управления платежами"""
+    return render_payment_page()
+
+@app.route('/create_payment_link', methods=['POST'])
+@login_required
+def create_payment_link():
+    """Создание ссылки для оплаты"""
+    receiver = request.form.get('receiver')
+    amount = request.form.get('amount')
+    description = request.form.get('description', '')
+    
+    if not receiver or not amount:
+        return redirect('/payment_page')
+    
+    try:
+        amount_int = int(amount)
+        if amount_int <= 0:
+            return redirect('/payment_page')
+    except:
+        return redirect('/payment_page')
+    
+    payment_id, payment_data = create_payment(
+        payer=session['user'],
+        receiver=receiver,
+        amount=amount_int,
+        description=description
+    )
+    
+    return redirect(f'/payment_page')
+
+@app.route('/pay/<payment_id>', methods=['GET'])
+def pay_page(payment_id):
+    """Страница оплаты для клиента"""
+    return render_pay_page(payment_id)
+
+@app.route('/process_payment/<payment_id>', methods=['POST'])
+def process_payment_route(payment_id):
+    """Обработка платежа (для неавторизованных пользователей)"""
+    username = request.form.get('username')
+    password = request.form.get('password')
+    
+    if not username or not password:
+        return "Неверные данные", 400
+    
+    # Проверяем логин и пароль
+    users = load_users()
+    user_data = users.get(username)
+    
+    if not user_data or user_data['password'] != password:
+        return "Неверный логин или пароль", 401
+    
+    # Проверяем, что пользователь является плательщиком
+    payments = load_payments()
+    payment = None
+    for p in payments:
+        if p["id"] == payment_id:
+            payment = p
+            break
+    
+    if not payment:
+        return "Платеж не найден", 404
+    
+    if payment["payer"] != username:
+        return "Вы не являетесь плательщиком по этому платежу", 403
+    
+    # Выполняем платеж
+    success, message = process_payment(payment_id, username)
+    
+    if success:
+        return redirect(f'/pay/{payment_id}')
+    else:
+        return f"Ошибка: {message}", 400
+
+# ---------- ОСНОВНЫЕ МАРШРУТЫ ----------
+@app.route('/', methods=['GET', 'POST'])
+def login():
+    if request.method == 'POST':
+        users = load_users()
+        username = request.form.get('username')
+        password = request.form.get('password')
+        
+        user_data = users.get(username)
+        if user_data and isinstance(user_data, dict) and user_data['password'] == password:
+            session['user'] = username
+            return redirect('/dashboard')
+        else:
+            return render_login().replace('</form>', 
+                '<div class="alert alert-danger mt-3">Неверный логин или пароль</div></form>')
+    
+    return render_login()
+
+@app.route('/register', methods=['GET', 'POST'])
+def register():
+    if request.method == 'POST':
+        users = load_users()
+        username = request.form.get('username')
+        
+        if username in users:
+            return render_register().replace('</form>',
+                '<div class="alert alert-danger mt-3">Пользователь уже существует</div></form>')
+        
+        user_data = {
+            'password': request.form.get('password'),
+            'balance': 1000,
+            'deposit': 0,
+            'credit': 0,
+            'role': 'client',
+            'full_name': f"{request.form.get('first_name')} {request.form.get('last_name')}",
+            'email': request.form.get('email'),
+            'api_key': None
+        }
+        
+        users[username] = user_data
+        save_users(users)
+        
+        session['user'] = username
+        return redirect('/dashboard')
+    
+    return render_register()
+
+@app.route('/dashboard')
+@login_required
+def dashboard():
+    users = load_users()
+    history = load_history()
+    
+    if session['user'] not in users:
+        session.clear()
+        return redirect('/')
+    
+    user_data = users[session['user']]
+    user_history = [h for h in history if h['user'] == session['user']]
+    user_cards = get_user_cards(session['user'])
+    shop_data = load_shop()
+    
+    return render_dashboard(user_data, user_history[-20:], user_cards, shop_data)
+
+@app.route('/generate_api_key', methods=['POST'])
+@login_required
+def generate_api_key_route():
+    users = load_users()
+    user = users.get(session['user'])
+    if user and isinstance(user, dict):
+        user['api_key'] = generate_api_key()
+        save_users(users)
+        add_history(session['user'], 'generate_api_key', 0)
+    return redirect('/dashboard')
+
+@app.route('/deposit', methods=['POST'])
+@login_required
+def deposit():
+    users = load_users()
+    user = users.get(session['user'])
+    
+    try:
+        amount = int(request.form.get('amount', 0))
+        if amount > 0 and user and user['balance'] >= amount:
+            user['balance'] -= amount
+            user['deposit'] += amount
+            save_users(users)
+            add_history(session['user'], 'deposit', amount)
+    except:
+        pass
+    
+    return redirect('/dashboard')
+
+@app.route('/credit', methods=['POST'])
+@login_required
+def credit():
+    users = load_users()
+    user = users.get(session['user'])
+    
+    try:
+        amount = int(request.form.get('amount', 0))
+        if amount > 0 and user:
+            user['balance'] += amount
+            user['credit'] += amount
+            save_users(users)
+            add_history(session['user'], 'credit', amount)
+    except:
+        pass
+    
+    return redirect('/dashboard')
+
+@app.route('/transfer', methods=['POST'])
+@login_required
+def transfer():
+    users = load_users()
+    sender = session['user']
+    
+    try:
+        target = request.form.get('target')
+        amount = int(request.form.get('amount', 0))
+        
+        sender_data = users.get(sender)
+        target_data = users.get(target)
+        
+        if (amount > 0 and target_data and target != sender and 
+            sender_data and sender_data['balance'] >= amount):
+            sender_data['balance'] -= amount
+            target_data['balance'] += amount
+            save_users(users)
+            add_history(sender, 'transfer', amount, target)
+    except Exception as e:
+        print(f"Transfer error: {e}")
+        pass
+    
+    return redirect('/dashboard')
+
+@app.route('/create_card', methods=['POST'])
+@login_required
+def create_card():
+    users = load_users()
+    user = users.get(session['user'])
+    card_type = request.form.get('card_type', 'standard')
+    
+    costs = {
+        'standard': 0,
+        'gold': 50,
+        'platinum': 100
+    }
+    
+    cost = costs.get(card_type, 0)
+    
+    if user and user['balance'] >= cost:
+        user['balance'] -= cost
+        save_users(users)
+        
+        card = create_user_card(session['user'], user, card_type)
+        if card:
+            add_history(session['user'], 'create_card', cost, f"{card_type}_{card['number'][-4:]}")
+    
+    return redirect('/dashboard')
+
+@app.route('/delete_card/<card_id>', methods=['POST'])
+@login_required
+def delete_card(card_id):
+    cards = load_cards()
+    user_cards = cards.get(session['user'], [])
+    cards[session['user']] = [c for c in user_cards if c['id'] != card_id]
+    save_cards(cards)
+    return redirect('/dashboard')
+
+# ---------- АДМИН МАРШРУТЫ (ИСПРАВЛЕННЫЕ) ----------
+@app.route('/admin')
+@admin_required
+def admin():
+    users = load_users()
+    return render_admin_panel(users)
+
+@app.route('/admin/change_role', methods=['POST'])
+@admin_required
+def admin_change_role():
+    users = load_users()
+    username = request.form.get('username')
+    new_role = request.form.get('role')
+    
+    if username in users and username != session['user'] and isinstance(users[username], dict):
+        users[username]['role'] = new_role
+        save_users(users)
+        add_history(session['user'], 'change_role', 0, f"{username}->{new_role}")
+    
+    return redirect('/admin')
+
+@app.route('/admin/add_money', methods=['POST'])
+@admin_required
+def admin_add_money():
+    users = load_users()
+    username = request.form.get('username')
+    amount = int(request.form.get('amount', 0))
+    
+    if username in users and amount > 0 and isinstance(users[username], dict):
+        users[username]['balance'] += amount
+        save_users(users)
+        add_history('admin', 'add_money', amount, username)
+    
+    return redirect('/admin')
+
+@app.route('/logout')
+def logout():
+    session.clear()
+    return redirect('/')
+
+# ---------- API ДОКУМЕНТАЦИЯ ----------
+@app.route('/api/docs')
+def api_docs():
+    """Страница с документацией API"""
+    return '''
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>API Документация</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <style>
+        body {
+            font-family: "Segoe UI", Tahoma, Geneva, Verdana, sans-serif;
+            background: #f5f7fb;
+            padding: 20px;
+        }
+        .code-block {
+            background: #1e1e1e;
+            color: #d4d4d4;
+            padding: 15px;
+            border-radius: 5px;
+            font-family: "Courier New", monospace;
+            overflow-x: auto;
+            margin: 10px 0;
+        }
+        .endpoint {
+            background: white;
+            border-radius: 10px;
+            padding: 20px;
+            margin-bottom: 20px;
+            box-shadow: 0 3px 10px rgba(0,0,0,0.05);
+            border-left: 4px solid #4361ee;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <div class="row">
+            <div class="col-12">
+                <div class="card mb-4">
+                    <div class="card-body">
+                        <h1 class="card-title"><i class="fas fa-code me-2"></i>Документация API</h1>
+                        <p class="card-text">Используйте API для интеграции банковских услуг в ваши приложения.</p>
+                        
+                        <h3 class="mt-4">Базовый URL</h3>
+                        <div class="code-block">
+                            http://localhost:5000/api/v1/
+                        </div>
+                        
+                        <h3 class="mt-4">Аутентификация</h3>
+                        <p>Для использования API необходим API ключ. Получите его в личном кабинете.</p>
+                        <p>Передавайте ключ одним из способов:</p>
+                        
+                        <h5>Заголовок HTTP:</h5>
+                        <div class="code-block">
+                            X-API-Key: ваш_api_ключ
+                        </div>
+                        
+                        <h5>Параметр запроса:</h5>
+                        <div class="code-block">
+                            ?api_key=ваш_api_ключ
+                        </div>
+                        
+                        <h5>JSON тело запроса:</h5>
+                        <div class="code-block">
+                            {
+                                "api_key": "ваш_api_ключ",
+                                ...
+                            }
+                        </div>
+                        
+                        <h3 class="mt-4">Доступные эндпоинты</h3>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-success">GET</span> /api/v1/health</h5>
+                            <p>Проверка здоровья системы (не требует API ключа)</p>
+                            <div class="code-block">
+curl http://localhost:5000/api/v1/health
+                            </div>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-info">GET</span> /api/v1/balance</h5>
+                            <p>Получить информацию о балансе пользователя</p>
+                            <div class="code-block">
+curl -H "X-API-Key: ваш_ключ" http://localhost:5000/api/v1/balance
+                            </div>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-info">GET</span> /api/v1/history?limit=50</h5>
+                            <p>Получить историю операций (опциональный параметр limit)</p>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-success">POST</span> /api/v1/deposit</h5>
+                            <p>Открыть вклад. Требуется JSON: {"amount": 100}</p>
+                            <div class="code-block">
+curl -X POST -H "X-API-Key: ваш_ключ" -H "Content-Type: application/json"<br>
+     -d "{\\"amount\\": 100}" http://localhost:5000/api/v1/deposit
+                            </div>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-success">POST</span> /api/v1/credit</h5>
+                            <p>Взять кредит. Требуется JSON: {"amount": 100}</p>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-success">POST</span> /api/v1/transfer</h5>
+                            <p>Сделать перевод. Требуется JSON: {"target": "username", "amount": 100}</p>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-info">GET</span> /api/v1/cards</h5>
+                            <p>Получить список карт пользователя</p>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-success">POST</span> /api/v1/cards/create</h5>
+                            <p>Создать карту. Требуется JSON: {"card_type": "standard"}</p>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-info">GET</span> /api/v1/shop/items</h5>
+                            <p>Получить список товаров в магазине</p>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-success">POST</span> /api/v1/payment/create</h5>
+                            <p>Создать платеж. Требуется JSON: {"receiver": "...", "amount": 100, "description": "..."}</p>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-success">POST</span> /api/v1/payment/process</h5>
+                            <p>Выполнить платеж. Требуется JSON: {"payment_id": "..."}</p>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-info">GET</span> /api/v1/payment/status/{payment_id}</h5>
+                            <p>Получить статус платежа</p>
+                        </div>
+                        
+                        <div class="endpoint">
+                            <h5><span class="badge bg-info">GET</span> /api/v1/system/status</h5>
+                            <p>Получить статус системы</p>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+</body>
+</html>
+'''
+# ================= ДЕКОРАТОР УЧИТЕЛЯ =================
+
+from functools import wraps
+
+def teacher_required(f):
+    @wraps(f)
+    def decorated(*args, **kwargs):
+        if 'user' not in session:
+            return redirect("/")
+
+        users = load_users()
+        user = users.get(session['user'])
+
+        if not user:
+            return redirect("/")
+
+        if user.get("role") not in ["teacher", "admin"]:
+            return redirect("/dashboard")
+
+        return f(*args, **kwargs)
+    return decorated
+
+# ============================================================
+# ========= ГРАФИК ДИНАМИКИ СРЕДНЕГО БАЛЛА ==================
+# ============================================================
+
+@app.route("/student_avg_graph/<student>")
+@login_required
+@teacher_required
+def student_avg_graph(student):
+    journal = load_journal()
+
+    if student not in journal:
+        return "Нет данных"
+
+    subjects = journal[student]
+
+    # собираем оценки по порядку добавления
+    all_grades = []
+    for subject, grades in subjects.items():
+        all_grades += grades
+
+    averages = []
+    current = []
+
+    for g in all_grades:
+        current.append(g)
+        averages.append(sum(current) / len(current))
+
+    plt.figure()
+    plt.plot(range(1, len(averages)+1), averages)
+
+    plt.xlabel("Количество оценок")
+    plt.ylabel("Средний балл")
+    plt.title(f"Динамика среднего балла {student}")
+
+    img = BytesIO()
+    plt.savefig(img, format="png")
+    plt.close()
+    img.seek(0)
+
+    graph_url = base64.b64encode(img.getvalue()).decode()
+
+    return f"""
+    <h2>📈 Динамика среднего балла: {student}</h2>
+    <a href="/journal">Назад</a>
+    <br><br>
+    <img src="data:image/png;base64,{graph_url}">
+    """
+
+
+# ============================================================
+# ========= ФИНАНСОВЫЙ ГРАФИК УЧЕНИКА ========================
+# ============================================================
+
+@app.route("/student_finance_graph/<student>")
+@login_required
+@teacher_required
+def student_finance_graph(student):
+    journal = load_journal()
+    users = load_users()
+
+    if student not in journal:
+        return "Нет данных"
+
+    subjects = journal[student]
+
+    # считаем баланс на основе оценок
+    balance_history = []
+    balance = 0
+
+    for subject, grades in subjects.items():
+        for g in grades:
+            balance += calculate_money_for_grade(g)
+            balance_history.append(balance)
+
+    if not balance_history:
+        return "Нет оценок"
+
+    plt.figure()
+    plt.plot(range(1, len(balance_history)+1), balance_history)
+
+    plt.xlabel("Количество оценок")
+    plt.ylabel("Баланс ($)")
+    plt.title(f"Финансовая динамика {student}")
+
+    img = BytesIO()
+    plt.savefig(img, format="png")
+    plt.close()
+    img.seek(0)
+
+    graph_url = base64.b64encode(img.getvalue()).decode()
+
+    return f"""
+    <h2>💰 Финансовый график: {student}</h2>
+    <a href="/journal">Назад</a>
+    <br><br>
+    <img src="data:image/png;base64,{graph_url}">
+    """
+
+
+# ============================================================
+# ОБНОВЛЕНИЕ ТАБЛИЦЫ В ЖУРНАЛЕ (добавление ссылок)
+# ============================================================
+
+@app.route("/journal")
+@login_required
+@teacher_required
+def journal_page():
+    journal = load_journal()
+
+    table = ""
+
+    for student, subjects in journal.items():
+        total = []
+        for grades in subjects.values():
+            total += grades
+
+        avg = round(sum(total)/len(total),2) if total else 0
+
+        table += f"""
+        <tr>
+            <td>{student}</td>
+            <td>{avg}</td>
+            <td>
+                <a href="/student_graph/{student}">📊 Успеваемость</a><br>
+                <a href="/student_avg_graph/{student}">📈 Средний</a><br>
+                <a href="/student_finance_graph/{student}">💰 Финансы</a>
+            </td>
+        </tr>
+        """
+
+    return f"""
+    <h2>Электронный журнал PRO MAX</h2>
+    <a href="/dashboard">Назад</a>
+    <hr>
+
+    <h3>Создать класс</h3>
+    <form method="post" action="/add_class">
+        <input name="class_name" placeholder="5А" required>
+        <button>Создать</button>
+    </form>
+
+    <h3>Добавить ученика в класс</h3>
+    <form method="post" action="/add_student_to_class">
+        <input name="student" placeholder="Логин ученика" required>
+        <input name="class_name" placeholder="Класс" required>
+        <button>Добавить</button>
+    </form>
+
+    <h3>Поставить оценку</h3>
+    <form method="post" action="/add_grade">
+        <input name="student" placeholder="Логин ученика" required>
+        <input name="subject" placeholder="Предмет" required>
+        <input name="grade" type="number" min="2" max="5" required>
+        <button>Поставить</button>
+    </form>
+
+    <hr>
+    <h3>Ученики</h3>
+    <table border="1" cellpadding="10">
+        <tr>
+            <th>Ученик</th>
+            <th>Средний балл</th>
+            <th>Графики</th>
+        </tr>
+        {table}
+    </table>
+
+    <br>
+    <a href="/rating">🏆 Смотреть рейтинг</a>
+    """
+	
+
+if __name__ == '__main__':
+    import threading
+    
+    def daily_update_thread():
+        while True:
+            time.sleep(86400)
+            daily_update()
+    
+    thread = threading.Thread(target=daily_update_thread, daemon=True)
+    thread.start()
+    app.run(host='0.0.0.0', port=5000, debug=True)
\ No newline at end of file