succ

succ

main.py

@@ -0,0 +1,565 @@
+from fastapi import FastAPI, HTTPException, Depends, UploadFile, File, Form, Request, status
+from fastapi.staticfiles import StaticFiles
+from fastapi.responses import FileResponse, HTMLResponse, RedirectResponse
+from fastapi.templating import Jinja2Templates
+from sqlalchemy import create_engine, Column, Integer, String, Float, Boolean, Text, DateTime, func
+from sqlalchemy.ext.declarative import declarative_base
+from sqlalchemy.orm import sessionmaker, Session
+from datetime import datetime
+import os
+import json
+import secrets
+from typing import List, Optional
+import uvicorn
+from hashlib import sha256
+
+# Настройка БД
+SQLALCHEMY_DATABASE_URL = "sqlite:///./oldmarket.db"
+engine = create_engine(SQLALCHEMY_DATABASE_URL)
+SessionLocal = sessionmaker(autocommit=False, autoflush=False, bind=engine)
+Base = declarative_base()
+
+# Модели БД
+class App(Base):
+    __tablename__ = "apps"
+    
+    id = Column(Integer, primary_key=True, index=True)
+    api = Column(String(10))
+    apk_file = Column(String(255))
+    description = Column(Text)
+    downloads = Column(Integer, default=0)
+    icon = Column(String(255))
+    is_game = Column(Boolean, default=False)
+    name = Column(String(255))
+    package = Column(String(255))
+    rating = Column(Float, default=0.0)
+    review_count = Column(Integer, default=0)
+    screenshots = Column(Text)
+    version = Column(String(50))
+    versions = Column(Text)
+
+class Review(Base):
+    __tablename__ = "reviews"
+    
+    id = Column(Integer, primary_key=True, index=True)
+    app_id = Column(Integer)
+    avatar = Column(String(255))
+    comment = Column(Text)
+    created_at = Column(String(50))
+    rating = Column(Integer)
+    user_id = Column(Integer)
+    username = Column(String(255))
+
+class AdminUser(Base):
+    __tablename__ = "admin_users"
+    
+    id = Column(Integer, primary_key=True, index=True)
+    username = Column(String(50), unique=True)
+    password_hash = Column(String(255))
+    created_at = Column(DateTime, default=datetime.utcnow)
+
+# Создаем таблицы
+Base.metadata.create_all(bind=engine)
+
+app = FastAPI(title="OldMarket Server")
+
+# Создаем папки для статических файлов
+os.makedirs("static/icons", exist_ok=True)
+os.makedirs("static/apks", exist_ok=True)
+os.makedirs("static/admin", exist_ok=True)
+
+# Монтируем статические файлы
+app.mount("/static", StaticFiles(directory="static"), name="static")
+app.mount("/html/apps", StaticFiles(directory="static/icons"), name="icons")
+
+# Настройка шаблонов
+templates = Jinja2Templates(directory="templates")
+
+# Зависимость для БД
+def get_db():
+    db = SessionLocal()
+    try:
+        yield db
+    finally:
+        db.close()
+
+# Аутентификация
+def hash_password(password: str) -> str:
+    return sha256(password.encode()).hexdigest()
+
+def verify_password(plain_password: str, hashed_password: str) -> bool:
+    return hash_password(plain_password) == hashed_password
+
+# Создаем дефолтного админа если нет пользователей
+def create_default_admin(db: Session):
+    if db.query(AdminUser).count() == 0:
+        default_admin = AdminUser(
+            username="admin",
+            password_hash=hash_password("admin123")
+        )
+        db.add(default_admin)
+        db.commit()
+        print("Создан дефолтный администратор: admin / admin123")
+
+# Сессии для аутентификации
+sessions = {}
+
+def create_session(user_id: int) -> str:
+    session_id = secrets.token_urlsafe(32)
+    sessions[session_id] = {
+        "user_id": user_id,
+        "created_at": datetime.utcnow()
+    }
+    return session_id
+
+def get_current_user(request: Request, db: Session = Depends(get_db)):
+    session_id = request.cookies.get("session_id")
+    if not session_id or session_id not in sessions:
+        return None
+    
+    user_data = sessions[session_id]
+    user = db.query(AdminUser).filter(AdminUser.id == user_data["user_id"]).first()
+    return user
+
+def require_auth(request: Request, db: Session = Depends(get_db)):
+    user = get_current_user(request, db)
+    if not user:
+        raise HTTPException(
+            status_code=status.HTTP_303_SEE_OTHER,
+            headers={"Location": "/admin/login"}
+        )
+    return user
+
+# API endpoints для клиентов (старая совместимость)
+@app.get("/api/apps")
+def get_apps(db: Session = Depends(get_db)):
+    apps = db.query(App).all()
+    return [
+        {
+            **{k: v for k, v in app.__dict__.items() if k != '_sa_instance_state'},
+            "screenshots": json.loads(app.screenshots) if app.screenshots else [],
+            "versions": json.loads(app.versions) if app.versions else []
+        }
+        for app in apps
+    ]
+
+@app.get("/api/app/{app_id}")
+def get_app(app_id: int, db: Session = Depends(get_db)):
+    app = db.query(App).filter(App.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="App not found")
+    
+    return {
+        **{k: v for k, v in app.__dict__.items() if k != '_sa_instance_state'},
+        "screenshots": json.loads(app.screenshots) if app.screenshots else [],
+        "versions": json.loads(app.versions) if app.versions else []
+    }
+
+@app.get("/api/app/{app_id}/reviews")
+def get_reviews(app_id: int, db: Session = Depends(get_db)):
+    reviews = db.query(Review).filter(Review.app_id == app_id).all()
+    return [
+        {k: v for k, v in review.__dict__.items() if k != '_sa_instance_state'}
+        for review in reviews
+    ]
+
+# Скачивание основной версии приложения
+@app.get("/api/download/{app_id}")
+def download_app(app_id: int, db: Session = Depends(get_db)):
+    app = db.query(App).filter(App.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="App not found")
+    
+    # Увеличиваем счетчик загрузок
+    app.downloads = (app.downloads or 0) + 1
+    db.commit()
+    
+    apk_path = f"static/apks/{app.apk_file}"
+    if not os.path.exists(apk_path):
+        raise HTTPException(status_code=404, detail="APK file not found")
+    
+    return FileResponse(
+        apk_path,
+        filename=app.apk_file,
+        media_type='application/vnd.android.package-archive'
+    )
+
+# Скачивание конкретной версии приложения
+@app.get("/api/download/{app_id}/{version}")
+def download_app_version(app_id: int, version: str, db: Session = Depends(get_db)):
+    app = db.query(App).filter(App.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="App not found")
+    
+    # Ищем нужную версию в списке версий
+    versions = json.loads(app.versions) if app.versions else []
+    target_version = None
+    
+    for ver in versions:
+        # Сравниваем версию, игнорируя регистр и пробелы
+        if ver.get("version", "").replace(" ", "").lower() == version.replace(" ", "").lower():
+            target_version = ver
+            break
+    
+    if not target_version:
+        raise HTTPException(status_code=404, detail=f"Version '{version}' not found for this app")
+    
+    # Увеличиваем счетчик загрузок основной версии
+    app.downloads = (app.downloads or 0) + 1
+    db.commit()
+    
+    apk_filename = target_version.get("apk_file")
+    if not apk_filename:
+        raise HTTPException(status_code=404, detail="APK filename not found for this version")
+    
+    apk_path = f"static/apks/{apk_filename}"
+    if not os.path.exists(apk_path):
+        raise HTTPException(status_code=404, detail="APK file not found")
+    
+    return FileResponse(
+        apk_path,
+        filename=apk_filename,
+        media_type='application/vnd.android.package-archive'
+    )
+
+# Аутентификация админ-панели
+@app.get("/admin/login", response_class=HTMLResponse)
+def admin_login(request: Request, db: Session = Depends(get_db)):
+    create_default_admin(db)
+    return templates.TemplateResponse("login.html", {"request": request})
+
+@app.post("/admin/login")
+def admin_login_post(
+    request: Request,
+    username: str = Form(...),
+    password: str = Form(...),
+    db: Session = Depends(get_db)
+):
+    user = db.query(AdminUser).filter(AdminUser.username == username).first()
+    if not user or not verify_password(password, user.password_hash):
+        return templates.TemplateResponse("login.html", {
+            "request": request,
+            "error": "Неверное имя пользователя или пароль"
+        })
+    
+    session_id = create_session(user.id)
+    response = RedirectResponse(url="/admin", status_code=302)
+    response.set_cookie(key="session_id", value=session_id, httponly=True)
+    return response
+
+@app.get("/admin/logout")
+def admin_logout():
+    response = RedirectResponse(url="/admin/login", status_code=302)
+    response.delete_cookie("session_id")
+    return response
+
+# Защищенные роуты админ-панели
+@app.get("/admin", response_class=HTMLResponse)
+def admin_panel(request: Request, user: AdminUser = Depends(require_auth), db: Session = Depends(get_db)):
+    apps_count = db.query(App).count()
+    reviews_count = db.query(Review).count()
+    
+    # ИСПРАВЛЕННАЯ СТРОКА: используем func.sum для получения суммы загрузок
+    total_downloads_result = db.query(func.sum(App.downloads)).scalar()
+    total_downloads = total_downloads_result if total_downloads_result is not None else 0
+    
+    return templates.TemplateResponse("admin.html", {
+        "request": request,
+        "apps_count": apps_count,
+        "reviews_count": reviews_count,
+        "total_downloads": total_downloads,
+        "username": user.username
+    })
+
+@app.get("/admin/apps", response_class=HTMLResponse)
+def admin_apps(request: Request, user: AdminUser = Depends(require_auth), db: Session = Depends(get_db)):
+    apps = db.query(App).all()
+    return templates.TemplateResponse("apps.html", {
+        "request": request, 
+        "apps": apps,
+        "username": user.username
+    })
+
+@app.get("/admin/reviews", response_class=HTMLResponse)
+def admin_reviews(request: Request, user: AdminUser = Depends(require_auth), db: Session = Depends(get_db)):
+    reviews = db.query(Review).all()
+    apps = db.query(App).all()
+    app_names = {app.id: app.name for app in apps}
+    
+    return templates.TemplateResponse("reviews.html", {
+        "request": request, 
+        "reviews": reviews,
+        "app_names": app_names,
+        "apps": apps,
+        "username": user.username
+    })
+
+# API для админ-панели (защищенные)
+@app.get("/api/admin/apps")
+def get_admin_apps(user: AdminUser = Depends(require_auth), db: Session = Depends(get_db)):
+    apps = db.query(App).all()
+    return apps
+
+@app.get("/api/admin/apps/{app_id}")
+def get_admin_app(app_id: int, user: AdminUser = Depends(require_auth), db: Session = Depends(get_db)):
+    app = db.query(App).filter(App.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="App not found")
+    return app
+
+@app.post("/api/admin/apps")
+def create_app(
+    user: AdminUser = Depends(require_auth),
+    name: str = Form(...),
+    package: str = Form(...),
+    version: str = Form(...),
+    api: str = Form(...),
+    description: str = Form(...),
+    is_game: bool = Form(False),
+    apk_file: UploadFile = File(...),
+    icon: UploadFile = File(...),
+    db: Session = Depends(get_db)
+):
+    # Сохраняем APK
+    apk_filename = f"{package}_{version.replace(' ', '_')}.apk"
+    apk_path = f"static/apks/{apk_filename}"
+    with open(apk_path, "wb") as f:
+        f.write(apk_file.file.read())
+    
+    # Сохраняем иконку
+    icon_filename = f"{package}_icon.png"
+    icon_path = f"static/icons/{icon_filename}"
+    with open(icon_path, "wb") as f:
+        f.write(icon.file.read())
+    
+    # Создаем базовую версию
+    base_version = {
+        "api": api,
+        "apk_file": apk_filename,
+        "version": version
+    }
+    
+    # Создаем запись в БД
+    db_app = App(
+        name=name,
+        package=package,
+        version=version,
+        api=api,
+        description=description,
+        is_game=is_game,
+        apk_file=apk_filename,
+        icon=icon_filename,
+        screenshots="[]",
+        versions=json.dumps([base_version])
+    )
+    db.add(db_app)
+    db.commit()
+    db.refresh(db_app)
+    
+    return {"message": "Приложение создано", "app_id": db_app.id}
+
+# НОВЫЙ ENDPOINT: Обновление приложения
+@app.put("/api/admin/apps/{app_id}")
+def update_app(
+    app_id: int,
+    user: AdminUser = Depends(require_auth),
+    name: str = Form(None),
+    package: str = Form(None),
+    version: str = Form(None),
+    api: str = Form(None),
+    description: str = Form(None),
+    is_game: bool = Form(None),
+    rating: float = Form(None),
+    icon: UploadFile = File(None),
+    db: Session = Depends(get_db)
+):
+    app = db.query(App).filter(App.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="App not found")
+    
+    # Обновляем поля если они переданы
+    if name is not None:
+        app.name = name
+    if package is not None:
+        app.package = package
+    if version is not None:
+        app.version = version
+    if api is not None:
+        app.api = api
+    if description is not None:
+        app.description = description
+    if is_game is not None:
+        app.is_game = is_game
+    if rating is not None:
+        app.rating = rating
+    
+    # Обновляем иконку если передана
+    if icon and icon.filename:
+        icon_filename = f"{app.package}_icon.png"
+        icon_path = f"static/icons/{icon_filename}"
+        with open(icon_path, "wb") as f:
+            f.write(icon.file.read())
+        app.icon = icon_filename
+    
+    db.commit()
+    return {"message": "Приложение обновлено"}
+
+@app.post("/api/admin/apps/{app_id}/versions")
+def add_app_version(
+    app_id: int,
+    user: AdminUser = Depends(require_auth),
+    version: str = Form(...),
+    api: str = Form(...),
+    apk_file: UploadFile = File(...),
+    db: Session = Depends(get_db)
+):
+    app = db.query(App).filter(App.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="App not found")
+    
+    # Сохраняем APK
+    apk_filename = f"{app.package}_{version.replace(' ', '_')}.apk"
+    apk_path = f"static/apks/{apk_filename}"
+    with open(apk_path, "wb") as f:
+        f.write(apk_file.file.read())
+    
+    # Добавляем версию
+    versions = json.loads(app.versions) if app.versions else []
+    new_version = {
+        "api": api,
+        "apk_file": apk_filename,
+        "version": version
+    }
+    versions.append(new_version)
+    app.versions = json.dumps(versions)
+    
+    db.commit()
+    return {"message": "Версия добавлена"}
+
+@app.delete("/api/admin/apps/{app_id}")
+def delete_app(app_id: int, user: AdminUser = Depends(require_auth), db: Session = Depends(get_db)):
+    app = db.query(App).filter(App.id == app_id).first()
+    if app:
+        # Удаляем все APK файлы версий
+        versions = json.loads(app.versions) if app.versions else []
+        for version in versions:
+            apk_file = version.get("apk_file")
+            if apk_file and os.path.exists(f"static/apks/{apk_file}"):
+                os.remove(f"static/apks/{apk_file}")
+        
+        # Удаляем иконку
+        if os.path.exists(f"static/icons/{app.icon}"):
+            os.remove(f"static/icons/{app.icon}")
+        
+        # Удаляем связанные отзывы
+        db.query(Review).filter(Review.app_id == app_id).delete()
+        
+        db.delete(app)
+        db.commit()
+    return {"message": "Приложение удалено"}
+
+# НОВЫЙ ENDPOINT: Установка основной версии из списка версий
+@app.post("/api/admin/apps/{app_id}/set-version")
+def set_main_version(
+    app_id: int,
+    user: AdminUser = Depends(require_auth),
+    version: str = Form(...),
+    db: Session = Depends(get_db)
+):
+    app = db.query(App).filter(App.id == app_id).first()
+    if not app:
+        raise HTTPException(status_code=404, detail="App not found")
+    
+    # Ищем версию в списке версий
+    versions = json.loads(app.versions) if app.versions else []
+    target_version = None
+    
+    for ver in versions:
+        if ver.get("version") == version:
+            target_version = ver
+            break
+    
+    if not target_version:
+        raise HTTPException(status_code=404, detail="Version not found in app versions")
+    
+    # Обновляем основную версию и APK файл
+    app.version = version
+    app.apk_file = target_version.get("apk_file")
+    app.api = target_version.get("api")
+    
+    db.commit()
+    return {"message": f"Основная версия установлена на {version}"}
+
+# Исправленный метод для добавления отзывов
+@app.post("/api/admin/reviews")
+def create_review(
+    user: AdminUser = Depends(require_auth),
+    app_id: int = Form(...),
+    username: str = Form(...),
+    rating: int = Form(...),
+    comment: str = Form(...),
+    avatar: UploadFile = File(None),
+    db: Session = Depends(get_db)
+):
+    try:
+        avatar_filename = "default_avatar.png"
+        
+        # Обрабатываем аватар только если он действительно загружен
+        if avatar and avatar.filename and avatar.filename.strip() != "":
+            # Проверяем, что это изображение
+            if not avatar.content_type or not avatar.content_type.startswith('image/'):
+                raise HTTPException(status_code=400, detail="Файл должен быть изображением")
+            
+            # Генерируем уникальное имя файла
+            file_extension = os.path.splitext(avatar.filename)[1]
+            avatar_filename = f"avatar_{int(datetime.now().timestamp())}{file_extension}"
+            avatar_path = f"static/icons/{avatar_filename}"
+            
+            # Сохраняем аватар
+            contents = avatar.file.read()
+            with open(avatar_path, "wb") as f:
+                f.write(contents)
+        
+        # Создаем отзыв
+        db_review = Review(
+            app_id=app_id,
+            username=username,
+            rating=rating,
+            comment=comment,
+            avatar=avatar_filename,
+            created_at=datetime.now().strftime("%Y-%m-%d %H:%M:%S"),
+            user_id=1
+        )
+        db.add(db_review)
+        
+        # Обновляем счетчик отзывов у приложения
+        app = db.query(App).filter(App.id == app_id).first()
+        if app:
+            app.review_count = db.query(Review).filter(Review.app_id == app_id).count()
+        
+        db.commit()
+        db.refresh(db_review)
+        
+        return {"message": "Отзыв создан", "review_id": db_review.id}
+        
+    except Exception as e:
+        db.rollback()
+        raise HTTPException(status_code=500, detail=f"Ошибка при создании отзыва: {str(e)}")
+
+@app.delete("/api/admin/reviews/{review_id}")
+def delete_review(review_id: int, user: AdminUser = Depends(require_auth), db: Session = Depends(get_db)):
+    review = db.query(Review).filter(Review.id == review_id).first()
+    if review:
+        app_id = review.app_id
+        db.delete(review)
+        
+        # Обновляем счетчик отзывов у приложения
+        app = db.query(App).filter(App.id == app_id).first()
+        if app:
+            app.review_count = db.query(Review).filter(Review.app_id == app_id).count()
+        
+        db.commit()
+    return {"message": "Отзыв удален"}
+
+if __name__ == "__main__":
+    uvicorn.run(app, host="0.0.0.0", port=5000)

requirements.txt

@@ -0,0 +1,5 @@
+fastapi==0.119.0
+SQLAlchemy==2.0.44
+uvicorn==0.37.0
+python-multipart==0.0.20
+Jinja2==3.1.6

templates/admin.html

@@ -0,0 +1,148 @@
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>OldMarket Admin</title>
+    <style>
+        * {
+            margin: 0;
+            padding: 0;
+            box-sizing: border-box;
+        }
+        body {
+            font-family: Arial, sans-serif;
+            background: #f5f5f5;
+        }
+        .sidebar {
+            width: 250px;
+            background: #2c3e50;
+            color: white;
+            height: 100vh;
+            position: fixed;
+            padding: 20px;
+        }
+        .sidebar h2 {
+            margin-bottom: 30px;
+            text-align: center;
+        }
+        .sidebar ul {
+            list-style: none;
+        }
+        .sidebar li {
+            margin: 15px 0;
+        }
+        .sidebar a {
+            color: white;
+            text-decoration: none;
+            padding: 10px;
+            display: block;
+            border-radius: 5px;
+            transition: background 0.3s;
+        }
+        .sidebar a:hover {
+            background: #34495e;
+        }
+        .content {
+            margin-left: 250px;
+            padding: 40px;
+        }
+        .dashboard-cards {
+            display: grid;
+            grid-template-columns: repeat(auto-fit, minmax(250px, 1fr));
+            gap: 20px;
+            margin-top: 20px;
+        }
+        .card {
+            background: white;
+            padding: 30px;
+            border-radius: 10px;
+            box-shadow: 0 2px 10px rgba(0,0,0,0.1);
+            text-align: center;
+        }
+        .card h3 {
+            color: #2c3e50;
+            margin-bottom: 10px;
+        }
+        .card .number {
+            font-size: 2em;
+            font-weight: bold;
+            color: #3498db;
+        }
+		.sidebar .user-info {
+            background: #34495e;
+            padding: 10px;
+            border-radius: 5px;
+            margin-bottom: 20px;
+            text-align: center;
+		}
+    </style>
+</head>
+<body>
+    <div class="sidebar">
+        <h2>OldMarket Admin</h2>
+        <div class="user-info">
+            Вы вошли как: <strong>{{ username }}</strong>
+        </div>
+        <ul>
+            <li><a href="/admin">Дашборд</a></li>
+            <li><a href="/admin/apps">Управление приложениями</a></li>
+            <li><a href="/admin/reviews">Управление отзывами</a></li>
+            <li><a href="/api/apps" target="_blank">API приложений</a></li>
+            <li><a href="/admin/logout">Выйти</a></li>
+        </ul>
+    </div>
+    
+    <div class="content">
+        <h1>Дашборд админ-панели</h1>
+        <p>Добро пожаловать в панель управления OldMarket</p>
+        
+        <div class="dashboard-cards">
+            <div class="card">
+                <h3>Приложения</h3>
+                <div class="number" id="apps-count">0</div>
+                <p>всего в каталоге</p>
+            </div>
+            <div class="card">
+                <h3>Отзывы</h3>
+                <div class="number" id="reviews-count">0</div>
+                <p>всего отзывов</p>
+            </div>
+            <div class="card">
+                <h3>Загрузки</h3>
+                <div class="number" id="downloads-count">0</div>
+                <p>всего скачиваний</p>
+            </div>
+        </div>
+    </div>
+
+    <script>
+        // Загружаем статистику
+        async function loadStats() {
+            try {
+                const appsResponse = await fetch('/api/admin/apps');
+                const apps = await appsResponse.json();
+                
+                document.getElementById('apps-count').textContent = apps.length;
+                
+                let totalDownloads = 0;
+                let totalReviews = 0;
+                
+                apps.forEach(app => {
+                    totalDownloads += app.downloads || 0;
+                    // Для отзывов нужно сделать отдельный запрос, упростим
+                    totalReviews += app.review_count || 0;
+                });
+                
+                document.getElementById('downloads-count').textContent = totalDownloads;
+                document.getElementById('reviews-count').textContent = totalReviews;
+                
+            } catch (error) {
+                console.error('Error loading stats:', error);
+            }
+        }
+        
+        loadStats();
+    </script>
+</body>
+</html>

templates/apps.html

@@ -0,0 +1,614 @@
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Управление приложениями - OldMarket Admin</title>
+    <style>
+        * {
+            margin: 0;
+            padding: 0;
+            box-sizing: border-box;
+        }
+        body {
+            font-family: Arial, sans-serif;
+            background: #f5f5f5;
+        }
+        .sidebar {
+            width: 250px;
+            background: #2c3e50;
+            color: white;
+            height: 100vh;
+            position: fixed;
+            padding: 20px;
+        }
+        .sidebar h2 {
+            margin-bottom: 30px;
+            text-align: center;
+        }
+        .sidebar .user-info {
+            background: #34495e;
+            padding: 10px;
+            border-radius: 5px;
+            margin-bottom: 20px;
+            text-align: center;
+        }
+        .sidebar ul {
+            list-style: none;
+        }
+        .sidebar li {
+            margin: 15px 0;
+        }
+        .sidebar a {
+            color: white;
+            text-decoration: none;
+            padding: 10px;
+            display: block;
+            border-radius: 5px;
+            transition: background 0.3s;
+        }
+        .sidebar a:hover {
+            background: #34495e;
+        }
+        .content {
+            margin-left: 250px;
+            padding: 40px;
+        }
+        .header {
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            margin-bottom: 30px;
+        }
+        .btn {
+            background: #3498db;
+            color: white;
+            padding: 10px 20px;
+            border: none;
+            border-radius: 5px;
+            cursor: pointer;
+            text-decoration: none;
+            display: inline-block;
+        }
+        .btn:hover {
+            background: #2980b9;
+        }
+        .btn-danger {
+            background: #e74c3c;
+        }
+        .btn-danger:hover {
+            background: #c0392b;
+        }
+        .btn-success {
+            background: #27ae60;
+        }
+        .btn-success:hover {
+            background: #219a52;
+        }
+        .btn-warning {
+            background: #f39c12;
+        }
+        .btn-warning:hover {
+            background: #e67e22;
+        }
+        .btn-info {
+            background: #17a2b8;
+        }
+        .btn-info:hover {
+            background: #138496;
+        }
+        table {
+            width: 100%;
+            background: white;
+            border-collapse: collapse;
+            box-shadow: 0 2px 10px rgba(0,0,0,0.1);
+        }
+        th, td {
+            padding: 12px;
+            text-align: left;
+            border-bottom: 1px solid #ddd;
+        }
+        th {
+            background: #34495e;
+            color: white;
+        }
+        tr:hover {
+            background: #f5f5f5;
+        }
+        .app-icon {
+            width: 40px;
+            height: 40px;
+            border-radius: 8px;
+        }
+        .modal {
+            display: none;
+            position: fixed;
+            top: 0;
+            left: 0;
+            width: 100%;
+            height: 100%;
+            background: rgba(0,0,0,0.5);
+            z-index: 1000;
+        }
+        .modal-content {
+            background: white;
+            margin: 50px auto;
+            padding: 30px;
+            width: 80%;
+            max-width: 600px;
+            border-radius: 10px;
+            max-height: 80vh;
+            overflow-y: auto;
+        }
+        .form-group {
+            margin-bottom: 15px;
+        }
+        label {
+            display: block;
+            margin-bottom: 5px;
+            font-weight: bold;
+        }
+        input, textarea, select {
+            width: 100%;
+            padding: 8px;
+            border: 1px solid #ddd;
+            border-radius: 4px;
+        }
+        .versions-list {
+            margin-top: 20px;
+            padding: 15px;
+            background: #f8f9fa;
+            border-radius: 5px;
+        }
+        .version-item {
+            padding: 8px;
+            border-bottom: 1px solid #ddd;
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+        }
+        .version-item:last-child {
+            border-bottom: none;
+        }
+        .download-link {
+            color: #3498db;
+            text-decoration: none;
+            font-size: 12px;
+        }
+        .download-link:hover {
+            text-decoration: underline;
+        }
+        .current-version {
+            background: #d4edda;
+            border-left: 4px solid #28a745;
+        }
+        .action-buttons {
+            display: flex;
+            gap: 5px;
+            flex-wrap: wrap;
+        }
+        .action-buttons .btn {
+            padding: 5px 10px;
+            font-size: 12px;
+        }
+        .rating-display {
+            color: #f39c12;
+            font-weight: bold;
+        }
+    </style>
+</head>
+<body>
+    <div class="sidebar">
+        <h2>OldMarket Admin</h2>
+        <div class="user-info">
+            Вы вошли как: <strong>{{ username }}</strong>
+        </div>
+        <ul>
+            <li><a href="/admin">Дашборд</a></li>
+            <li><a href="/admin/apps">Управление приложениями</a></li>
+            <li><a href="/admin/reviews">Управление отзывами</a></li>
+            <li><a href="/api/apps" target="_blank">API приложений</a></li>
+            <li><a href="/admin/logout">Выйти</a></li>
+        </ul>
+    </div>
+    
+    <div class="content">
+        <div class="header">
+            <h1>Управление приложениями</h1>
+            <button class="btn" onclick="showAddForm()">Добавить приложение</button>
+        </div>
+        
+        <table id="apps-table">
+            <thead>
+                <tr>
+                    <th>ID</th>
+                    <th>Иконка</th>
+                    <th>Название</th>
+                    <th>Пакет</th>
+                    <th>Версия</th>
+                    <th>API</th>
+                    <th>Загрузки</th>
+                    <th>Рейтинг</th>
+                    <th>Действия</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for app in apps %}
+                <tr>
+                    <td>{{ app.id }}</td>
+                    <td>
+                        {% if app.icon %}
+                        <img src="/html/apps/{{ app.icon }}" alt="{{ app.name }}" class="app-icon">
+                        {% endif %}
+                    </td>
+                    <td>{{ app.name }}</td>
+                    <td>{{ app.package }}</td>
+                    <td>{{ app.version }}</td>
+                    <td>{{ app.api }}</td>
+                    <td>{{ app.downloads }}</td>
+                    <td class="rating-display">{{ app.rating }}</td>
+                    <td>
+                        <div class="action-buttons">
+                            <button class="btn btn-success" onclick="showAppDetails({{ app.id }})">Подробно</button>
+                            <button class="btn btn-info" onclick="showEditForm({{ app.id }})">Изменить</button>
+                            <button class="btn btn-warning" onclick="showVersionModal({{ app.id }})">Версия+</button>
+                            <button class="btn btn-danger" onclick="deleteApp({{ app.id }})">Удалить</button>
+                        </div>
+                    </td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+
+    <!-- Модальное окно для добавления приложения -->
+    <div id="addModal" class="modal">
+        <div class="modal-content">
+            <h2>Добавить приложение</h2>
+            <form id="addAppForm" enctype="multipart/form-data">
+                <div class="form-group">
+                    <label>Название:</label>
+                    <input type="text" name="name" required>
+                </div>
+                <div class="form-group">
+                    <label>Пакет:</label>
+                    <input type="text" name="package" required>
+                </div>
+                <div class="form-group">
+                    <label>Версия:</label>
+                    <input type="text" name="version" required>
+                </div>
+                <div class="form-group">
+                    <label>API уровень:</label>
+                    <input type="text" name="api" required>
+                </div>
+                <div class="form-group">
+                    <label>Описание:</label>
+                    <textarea name="description" rows="3" required></textarea>
+                </div>
+                <div class="form-group">
+                    <label>Рейтинг (0.0 - 5.0):</label>
+                    <input type="number" name="rating" min="0" max="5" step="0.1" value="0.0">
+                </div>
+                <div class="form-group">
+                    <label>Это игра?</label>
+                    <input type="checkbox" name="is_game">
+                </div>
+                <div class="form-group">
+                    <label>APK файл:</label>
+                    <input type="file" name="apk_file" accept=".apk" required>
+                </div>
+                <div class="form-group">
+                    <label>Иконка:</label>
+                    <input type="file" name="icon" accept="image/*" required>
+                </div>
+                <div class="form-group">
+                    <button type="submit" class="btn">Добавить</button>
+                    <button type="button" class="btn" onclick="hideAddForm()">Отмена</button>
+                </div>
+            </form>
+        </div>
+    </div>
+
+    <!-- Модальное окно для редактирования приложения -->
+    <div id="editModal" class="modal">
+        <div class="modal-content">
+            <h2>Редактировать приложение</h2>
+            <form id="editAppForm" enctype="multipart/form-data">
+                <input type="hidden" id="editAppId" name="app_id">
+                <div class="form-group">
+                    <label>Название:</label>
+                    <input type="text" id="editName" name="name" required>
+                </div>
+                <div class="form-group">
+                    <label>Пакет:</label>
+                    <input type="text" id="editPackage" name="package" required>
+                </div>
+                <div class="form-group">
+                    <label>Версия:</label>
+                    <input type="text" id="editVersion" name="version" required>
+                </div>
+                <div class="form-group">
+                    <label>API уровень:</label>
+                    <input type="text" id="editApi" name="api" required>
+                </div>
+                <div class="form-group">
+                    <label>Описание:</label>
+                    <textarea id="editDescription" name="description" rows="3" required></textarea>
+                </div>
+                <div class="form-group">
+                    <label>Рейтинг (0.0 - 5.0):</label>
+                    <input type="number" id="editRating" name="rating" min="0" max="5" step="0.1" required>
+                </div>
+                <div class="form-group">
+                    <label>Это игра?</label>
+                    <input type="checkbox" id="editIsGame" name="is_game">
+                </div>
+                <div class="form-group">
+                    <label>Новая иконка (оставьте пустым, чтобы не менять):</label>
+                    <input type="file" name="icon" accept="image/*">
+                </div>
+                <div class="form-group">
+                    <button type="submit" class="btn">Сохранить</button>
+                    <button type="button" class="btn" onclick="hideEditForm()">Отмена</button>
+                </div>
+            </form>
+        </div>
+    </div>
+
+    <!-- Модальное окно для просмотра деталей приложения -->
+    <div id="detailsModal" class="modal">
+        <div class="modal-content">
+            <h2>Детали приложения</h2>
+            <div id="appDetails"></div>
+            <div class="form-group">
+                <button type="button" class="btn" onclick="hideDetailsModal()">Закрыть</button>
+            </div>
+        </div>
+    </div>
+
+    <!-- Модальное окно для добавления версии -->
+    <div id="versionModal" class="modal">
+        <div class="modal-content">
+            <h2>Добавить версию</h2>
+            <form id="addVersionForm" enctype="multipart/form-data">
+                <input type="hidden" id="versionAppId" name="app_id">
+                <div class="form-group">
+                    <label>Версия (например: 1.0, 2.1, Geometry Dash 1.0):</label>
+                    <input type="text" name="version" required>
+                    <small>Используется в URL: /api/download/{app_id}/{version}</small>
+                </div>
+                <div class="form-group">
+                    <label>API уровень:</label>
+                    <input type="text" name="api" required>
+                </div>
+                <div class="form-group">
+                    <label>APK файл:</label>
+                    <input type="file" name="apk_file" accept=".apk" required>
+                </div>
+                <div class="form-group">
+                    <button type="submit" class="btn">Добавить версию</button>
+                    <button type="button" class="btn" onclick="hideVersionModal()">Отмена</button>
+                </div>
+            </form>
+        </div>
+    </div>
+
+    <script>
+        function showAddForm() {
+            document.getElementById('addModal').style.display = 'block';
+        }
+        
+        function hideAddForm() {
+            document.getElementById('addModal').style.display = 'none';
+        }
+
+        function showEditForm(appId) {
+            // Загружаем данные приложения
+            fetch(`/api/admin/apps/${appId}`)
+                .then(response => response.json())
+                .then(app => {
+                    document.getElementById('editAppId').value = app.id;
+                    document.getElementById('editName').value = app.name;
+                    document.getElementById('editPackage').value = app.package;
+                    document.getElementById('editVersion').value = app.version;
+                    document.getElementById('editApi').value = app.api;
+                    document.getElementById('editDescription').value = app.description;
+                    document.getElementById('editRating').value = app.rating;
+                    document.getElementById('editIsGame').checked = app.is_game;
+                    
+                    document.getElementById('editModal').style.display = 'block';
+                })
+                .catch(error => {
+                    alert('Ошибка при загрузке данных: ' + error);
+                });
+        }
+        
+        function hideEditForm() {
+            document.getElementById('editModal').style.display = 'none';
+        }
+
+        function showDetailsModal() {
+            document.getElementById('detailsModal').style.display = 'block';
+        }
+        
+        function hideDetailsModal() {
+            document.getElementById('detailsModal').style.display = 'none';
+        }
+
+        function showVersionModal(appId) {
+            document.getElementById('versionAppId').value = appId;
+            document.getElementById('versionModal').style.display = 'block';
+        }
+        
+        function hideVersionModal() {
+            document.getElementById('versionModal').style.display = 'none';
+        }
+        
+        async function showAppDetails(appId) {
+            try {
+                const response = await fetch(`/api/app/${appId}`);
+                const app = await response.json();
+                
+                let versionsHtml = '';
+                if (app.versions && app.versions.length > 0) {
+                    versionsHtml = '<h3>Версии:</h3><div class="versions-list">';
+                    app.versions.forEach(version => {
+                        const isCurrent = version.version === app.version;
+                        const versionClass = isCurrent ? 'version-item current-version' : 'version-item';
+                        
+                        // Создаем URL для скачивания версии
+                        const downloadUrl = `/api/download/${appId}/${encodeURIComponent(version.version)}`;
+                        versionsHtml += `
+                            <div class="${versionClass}">
+                                <div>
+                                    <strong>${version.version}</strong> (API: ${version.api})<br>
+                                    <small>Файл: ${version.apk_file}</small><br>
+                                    <a href="${downloadUrl}" class="download-link" target="_blank">Скачать эту версию</a>
+                                </div>
+                                <div>
+                                    ${isCurrent ? '<strong>Текущая</strong>' : `<button class="btn btn-success" onclick="setMainVersion(${appId}, '${version.version}')">Сделать основной</button>`}
+                                </div>
+                            </div>
+                        `;
+                    });
+                    versionsHtml += '</div>';
+                }
+                
+                document.getElementById('appDetails').innerHTML = `
+                    <div class="form-group">
+                        <strong>ID:</strong> ${app.id}
+                    </div>
+                    <div class="form-group">
+                        <strong>Название:</strong> ${app.name}
+                    </div>
+                    <div class="form-group">
+                        <strong>Пакет:</strong> ${app.package}
+                    </div>
+                    <div class="form-group">
+                        <strong>Текущая версия:</strong> ${app.version} (API: ${app.api})
+                    </div>
+                    <div class="form-group">
+                        <strong>Загрузки:</strong> ${app.downloads || 0}
+                    </div>
+                    <div class="form-group">
+                        <strong>Рейтинг:</strong> ${app.rating || 0}
+                    </div>
+                    <div class="form-group">
+                        <strong>Отзывы:</strong> ${app.review_count || 0}
+                    </div>
+                    <div class="form-group">
+                        <strong>Основная ссылка для скачивания:</strong><br>
+                        <a href="/api/download/${app.id}" target="_blank">/api/download/${app.id}</a>
+                    </div>
+                    <div class="form-group">
+                        <strong>Описание:</strong><br>${app.description}
+                    </div>
+                    ${versionsHtml}
+                    <div class="form-group">
+                        <button type="button" class="btn btn-warning" onclick="showVersionModal(${app.id})">Добавить версию</button>
+                        <button type="button" class="btn btn-info" onclick="showEditForm(${app.id})">Изменить приложение</button>
+                    </div>
+                `;
+                showDetailsModal();
+            } catch (error) {
+                alert('Ошибка при загрузке деталей: ' + error);
+            }
+        }
+        
+        async function setMainVersion(appId, version) {
+            if (confirm(`Установить версию "${version}" как основную?`)) {
+                try {
+                    const formData = new FormData();
+                    formData.append('version', version);
+                    
+                    const response = await fetch(`/api/admin/apps/${appId}/set-version`, {
+                        method: 'POST',
+                        body: formData
+                    });
+                    const result = await response.json();
+                    alert(result.message);
+                    location.reload();
+                } catch (error) {
+                    alert('Ошибка при установке версии: ' + error);
+                }
+            }
+        }
+        
+        async function deleteApp(appId) {
+            if (confirm('Вы уверены, что хотите удалить это приложение? Будут удалены все версии и отзывы.')) {
+                try {
+                    const response = await fetch(`/api/admin/apps/${appId}`, {
+                        method: 'DELETE'
+                    });
+                    const result = await response.json();
+                    alert(result.message);
+                    location.reload();
+                } catch (error) {
+                    alert('Ошибка при удалении: ' + error);
+                }
+            }
+        }
+        
+        document.getElementById('addAppForm').addEventListener('submit', async function(e) {
+            e.preventDefault();
+            
+            const formData = new FormData(this);
+            
+            try {
+                const response = await fetch('/api/admin/apps', {
+                    method: 'POST',
+                    body: formData
+                });
+                const result = await response.json();
+                alert(result.message);
+                hideAddForm();
+                location.reload();
+            } catch (error) {
+                alert('Ошибка при добавлении: ' + error);
+            }
+        });
+
+        document.getElementById('editAppForm').addEventListener('submit', async function(e) {
+            e.preventDefault();
+            
+            const formData = new FormData(this);
+            const appId = document.getElementById('editAppId').value;
+            
+            try {
+                const response = await fetch(`/api/admin/apps/${appId}`, {
+                    method: 'PUT',
+                    body: formData
+                });
+                const result = await response.json();
+                alert(result.message);
+                hideEditForm();
+                location.reload();
+            } catch (error) {
+                alert('Ошибка при обновлении: ' + error);
+            }
+        });
+
+        document.getElementById('addVersionForm').addEventListener('submit', async function(e) {
+            e.preventDefault();
+            
+            const formData = new FormData(this);
+            const appId = document.getElementById('versionAppId').value;
+            
+            try {
+                const response = await fetch(`/api/admin/apps/${appId}/versions`, {
+                    method: 'POST',
+                    body: formData
+                });
+                const result = await response.json();
+                alert(result.message);
+                hideVersionModal();
+                // Обновляем детали приложения
+                showAppDetails(appId);
+            } catch (error) {
+                alert('Ошибка при добавлении версии: ' + error);
+            }
+        });
+    </script>
+</body>
+</html>

templates/login.html

@@ -0,0 +1,132 @@
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Вход в админ-панель - OldMarket</title>
+    <style>
+        * {
+            margin: 0;
+            padding: 0;
+            box-sizing: border-box;
+        }
+        body {
+            font-family: Arial, sans-serif;
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            height: 100vh;
+            display: flex;
+            justify-content: center;
+            align-items: center;
+        }
+        .login-container {
+            background: white;
+            padding: 40px;
+            border-radius: 10px;
+            box-shadow: 0 10px 30px rgba(0,0,0,0.3);
+            width: 100%;
+            max-width: 400px;
+        }
+        .login-header {
+            text-align: center;
+            margin-bottom: 30px;
+        }
+        .login-header h1 {
+            color: #2c3e50;
+            margin-bottom: 10px;
+        }
+        .login-header p {
+            color: #7f8c8d;
+        }
+        .form-group {
+            margin-bottom: 20px;
+        }
+        label {
+            display: block;
+            margin-bottom: 5px;
+            font-weight: bold;
+            color: #2c3e50;
+        }
+        input {
+            width: 100%;
+            padding: 12px;
+            border: 2px solid #ecf0f1;
+            border-radius: 5px;
+            font-size: 16px;
+            transition: border-color 0.3s;
+        }
+        input:focus {
+            outline: none;
+            border-color: #3498db;
+        }
+        .btn {
+            background: #3498db;
+            color: white;
+            padding: 12px 20px;
+            border: none;
+            border-radius: 5px;
+            cursor: pointer;
+            font-size: 16px;
+            width: 100%;
+            transition: background 0.3s;
+        }
+        .btn:hover {
+            background: #2980b9;
+        }
+        .error {
+            background: #e74c3c;
+            color: white;
+            padding: 10px;
+            border-radius: 5px;
+            margin-bottom: 20px;
+            text-align: center;
+        }
+        .default-credentials {
+            margin-top: 20px;
+            padding: 15px;
+            background: #f8f9fa;
+            border-radius: 5px;
+            border-left: 4px solid #3498db;
+        }
+        .default-credentials h4 {
+            color: #2c3e50;
+            margin-bottom: 5px;
+        }
+        .default-credentials p {
+            color: #7f8c8d;
+            font-size: 14px;
+        }
+    </style>
+</head>
+<body>
+    <div class="login-container">
+        <div class="login-header">
+            <h1>OldMarket Admin</h1>
+            <p>Войдите в панель управления</p>
+        </div>
+
+        {% if error %}
+        <div class="error">
+            {{ error }}
+        </div>
+        {% endif %}
+
+        <form method="post">
+            <div class="form-group">
+                <label for="username">Имя пользователя:</label>
+                <input type="text" id="username" name="username" required>
+            </div>
+            <div class="form-group">
+                <label for="password">Пароль:</label>
+                <input type="password" id="password" name="password" required>
+            </div>
+            <button type="submit" class="btn">Войти</button>
+        </form>
+
+        <div class="default-credentials">
+            <h4>Демо доступ:</h4>
+            <p><strong>Логин:</strong> admin</p>
+            <p><strong>Пароль:</strong> admin123</p>
+        </div>
+    </div>
+</body>
+</html>

templates/reviews.html

@@ -0,0 +1,305 @@
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Управление отзывами - OldMarket Admin</title>
+    <style>
+        * {
+            margin: 0;
+            padding: 0;
+            box-sizing: border-box;
+        }
+        body {
+            font-family: Arial, sans-serif;
+            background: #f5f5f5;
+        }
+        .sidebar {
+            width: 250px;
+            background: #2c3e50;
+            color: white;
+            height: 100vh;
+            position: fixed;
+            padding: 20px;
+        }
+        .sidebar h2 {
+            margin-bottom: 30px;
+            text-align: center;
+        }
+        .sidebar .user-info {
+            background: #34495e;
+            padding: 10px;
+            border-radius: 5px;
+            margin-bottom: 20px;
+            text-align: center;
+        }
+        .sidebar ul {
+            list-style: none;
+        }
+        .sidebar li {
+            margin: 15px 0;
+        }
+        .sidebar a {
+            color: white;
+            text-decoration: none;
+            padding: 10px;
+            display: block;
+            border-radius: 5px;
+            transition: background 0.3s;
+        }
+        .sidebar a:hover {
+            background: #34495e;
+        }
+        .content {
+            margin-left: 250px;
+            padding: 40px;
+        }
+        .header {
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            margin-bottom: 30px;
+        }
+        .btn {
+            background: #3498db;
+            color: white;
+            padding: 10px 20px;
+            border: none;
+            border-radius: 5px;
+            cursor: pointer;
+            text-decoration: none;
+            display: inline-block;
+        }
+        .btn:hover {
+            background: #2980b9;
+        }
+        .btn-danger {
+            background: #e74c3c;
+        }
+        .btn-danger:hover {
+            background: #c0392b;
+        }
+        .btn-success {
+            background: #27ae60;
+        }
+        .btn-success:hover {
+            background: #219a52;
+        }
+        table {
+            width: 100%;
+            background: white;
+            border-collapse: collapse;
+            box-shadow: 0 2px 10px rgba(0,0,0,0.1);
+        }
+        th, td {
+            padding: 12px;
+            text-align: left;
+            border-bottom: 1px solid #ddd;
+        }
+        th {
+            background: #34495e;
+            color: white;
+        }
+        tr:hover {
+            background: #f5f5f5;
+        }
+        .rating {
+            color: #f39c12;
+            font-weight: bold;
+        }
+        .modal {
+            display: none;
+            position: fixed;
+            top: 0;
+            left: 0;
+            width: 100%;
+            height: 100%;
+            background: rgba(0,0,0,0.5);
+            z-index: 1000;
+        }
+        .modal-content {
+            background: white;
+            margin: 50px auto;
+            padding: 30px;
+            width: 80%;
+            max-width: 600px;
+            border-radius: 10px;
+            max-height: 80vh;
+            overflow-y: auto;
+        }
+        .form-group {
+            margin-bottom: 15px;
+        }
+        label {
+            display: block;
+            margin-bottom: 5px;
+            font-weight: bold;
+        }
+        input, textarea, select {
+            width: 100%;
+            padding: 8px;
+            border: 1px solid #ddd;
+            border-radius: 4px;
+        }
+        .comment-preview {
+            max-height: 60px;
+            overflow: hidden;
+            text-overflow: ellipsis;
+        }
+    </style>
+</head>
+<body>
+    <div class="sidebar">
+        <h2>OldMarket Admin</h2>
+        <div class="user-info">
+            Вы вошли как: <strong>{{ username }}</strong>
+        </div>
+        <ul>
+            <li><a href="/admin">Дашборд</a></li>
+            <li><a href="/admin/apps">Управление приложениями</a></li>
+            <li><a href="/admin/reviews">Управление отзывами</a></li>
+            <li><a href="/api/apps" target="_blank">API приложений</a></li>
+            <li><a href="/admin/logout">Выйти</a></li>
+        </ul>
+    </div>
+    
+    <div class="content">
+        <div class="header">
+            <h1>Управление отзывами</h1>
+            <button class="btn" onclick="showAddReviewForm()">Добавить отзыв</button>
+        </div>
+        
+        <table>
+            <thead>
+                <tr>
+                    <th>ID</th>
+                    <th>Пользователь</th>
+                    <th>Приложение</th>
+                    <th>Рейтинг</th>
+                    <th>Комментарий</th>
+                    <th>Дата</th>
+                    <th>Действия</th>
+                </tr>
+            </thead>
+            <tbody>
+                {% for review in reviews %}
+                <tr>
+                    <td>{{ review.id }}</td>
+                    <td>{{ review.username }}</td>
+                    <td>
+                        {% if app_names[review.app_id] %}
+                            {{ app_names[review.app_id] }} (ID: {{ review.app_id }})
+                        {% else %}
+                            ID: {{ review.app_id }}
+                        {% endif %}
+                    </td>
+                    <td class="rating">{{ '★' * review.rating }}{{ '☆' * (5 - review.rating) }}</td>
+                    <td class="comment-preview" title="{{ review.comment }}">
+                        {{ review.comment[:50] }}{% if review.comment|length > 50 %}...{% endif %}
+                    </td>
+                    <td>{{ review.created_at }}</td>
+                    <td>
+                        <button class="btn btn-danger" onclick="deleteReview({{ review.id }})">Удалить</button>
+                    </td>
+                </tr>
+                {% endfor %}
+            </tbody>
+        </table>
+    </div>
+
+    <!-- Модальное окно для добавления отзыва -->
+    <div id="addReviewModal" class="modal">
+        <div class="modal-content">
+            <h2>Добавить отзыв</h2>
+            <form id="addReviewForm" enctype="multipart/form-data">
+                <div class="form-group">
+                    <label>Приложение:</label>
+                    <select name="app_id" required>
+                        <option value="">Выберите приложение</option>
+                        {% for app in apps %}
+                        <option value="{{ app.id }}">{{ app.name }} (ID: {{ app.id }})</option>
+                        {% endfor %}
+                    </select>
+                </div>
+                <div class="form-group">
+                    <label>Имя пользователя:</label>
+                    <input type="text" name="username" required>
+                </div>
+                <div class="form-group">
+                    <label>Рейтинг (1-5):</label>
+                    <select name="rating" required>
+                        <option value="5">★★★★★ (5)</option>
+                        <option value="4">★★★★☆ (4)</option>
+                        <option value="3">★★★☆☆ (3)</option>
+                        <option value="2">★★☆☆☆ (2)</option>
+                        <option value="1">★☆☆☆☆ (1)</option>
+                    </select>
+                </div>
+                <div class="form-group">
+                    <label>Комментарий:</label>
+                    <textarea name="comment" rows="4"></textarea>
+                </div>
+                <div class="form-group">
+                    <label>Аватар (опционально):</label>
+                    <input type="file" name="avatar" accept="image/*">
+                </div>
+                <div class="form-group">
+                    <button type="submit" class="btn">Добавить отзыв</button>
+                    <button type="button" class="btn" onclick="hideAddReviewForm()">Отмена</button>
+                </div>
+            </form>
+        </div>
+    </div>
+
+    <script>
+    function showAddReviewForm() {
+        document.getElementById('addReviewModal').style.display = 'block';
+    }
+    
+    function hideAddReviewForm() {
+        document.getElementById('addReviewModal').style.display = 'none';
+    }
+    
+    async function deleteReview(reviewId) {
+        if (confirm('Вы уверены, что хотите удалить этот отзыв?')) {
+            try {
+                const response = await fetch(`/api/admin/reviews/${reviewId}`, {
+                    method: 'DELETE'
+                });
+                const result = await response.json();
+                alert(result.message);
+                location.reload();
+            } catch (error) {
+                alert('Ошибка при удалении: ' + error);
+            }
+        }
+    }
+    
+    document.getElementById('addReviewForm').addEventListener('submit', async function(e) {
+        e.preventDefault();
+        
+        const formData = new FormData(this);
+        
+        try {
+            const response = await fetch('/api/admin/reviews', {
+                method: 'POST',
+                body: formData
+            });
+            
+            if (!response.ok) {
+                const errorData = await response.json();
+                throw new Error(errorData.detail || 'Ошибка сервера');
+            }
+            
+            const result = await response.json();
+            alert(result.message);
+            hideAddReviewForm();
+            location.reload();
+        } catch (error) {
+            console.error('Error:', error);
+            alert('Ошибка при добавлении: ' + error.message);
+        }
+    });
+	</script>
+</body>
+</html>