From 82e534f4d3753f2b4f3bb78118ee4e67228da623 Mon Sep 17 00:00:00 2001
From: Simon Cloutier <simon@qic.ca>
Date: Wed, 2 Apr 2025 00:42:37 -0400
Subject: [PATCH] getting there

---
 app/__pycache__/app.cpython-39.pyc            | Bin 1545 -> 1384 bytes
 app/__pycache__/config.cpython-39.pyc         | Bin 1765 -> 1297 bytes
 app/__pycache__/database.cpython-39.pyc       | Bin 1214 -> 848 bytes
 app/__pycache__/wsgi.cpython-39.pyc           | Bin 174 -> 127 bytes
 app/app.py                                    |  17 +-
 app/config.py                                 |  35 +-
 app/database.py                               |  38 +-
 app/db_interface.py                           | 272 ++++++++++++++
 app/templates/base.html                       | 349 +++++++-----------
 app/templates/group_list.html                 | 197 ++--------
 app/templates/index.html                      |  18 +-
 app/templates/stats.html                      |  16 +-
 app/templates/user_list.html                  | 216 +++--------
 .../__pycache__/group_views.cpython-39.pyc    | Bin 5886 -> 1348 bytes
 .../__pycache__/index_views.cpython-39.pyc    | Bin 5561 -> 2511 bytes
 .../__pycache__/user_views.cpython-39.pyc     | Bin 7531 -> 1827 bytes
 app/views/group_views.py                      | 216 ++---------
 app/views/index_views.py                      | 193 +++-------
 app/views/user_views.py                       | 297 ++-------------
 app/wsgi.py                                   |   3 +-
 docker-compose.yml                            |   1 -
 radius/main.py                                |   2 +-
 22 files changed, 643 insertions(+), 1227 deletions(-)
 create mode 100644 app/db_interface.py

diff --git a/app/__pycache__/app.cpython-39.pyc b/app/__pycache__/app.cpython-39.pyc
index c8cda552d7a8bd5cbd2d1aa366a68dcd0cf1996a..77c12e50d3e8fd84b3c59edff3db0d0293460ea1 100644
GIT binary patch
delta 604
zcmZut%}(1u5cb;nF~)W_Hijg)X`m`nKtf!&RH#x_sfwz?fr^VSQN)Z~TP8;9Akh<t
za^b)M`~uFKv@g(8d+`&r5)aX_6MibOtDT+s_WQos-7Ec%W{wO)lW26m-}&z<H>S(>
zZng#&I+H+xT4Z=extpFzdp&BLaE~(y88*K$&q6C)%xu)BjIbhK0(Hv7&w0K8+En%&
zG{a?DD_IMjDT77OuVvzMbie=;8rO=~#&*_0BV3(1U4(A-0^4(2_vumA#o8S2q6!?E
zrI{6WQ3LC~%3gv^t(L&Kl<1;8v<O)yWCdC!vQ{G00Xnc+BI{85EcM;L#c!lP*iq}C
z&vN@Po{T2J*#8hjI2er~LXm!wf7Lj#1Wz}Vb;G4JkqenDtn^5E^O5@^K0Dnm<1h-6
ziD;Dc|3j0?ycwZCI{rF*<n{=@x3kmV%KP0}uLp6dGlMbU`A{GP0*@!JpNJgF`>)dd
zO1zfWquBT9`nen@IiDBXUuF+Ugmzo)rJL2$fmOKMMJUwbxsK}INepKZzGcKnb||!%
TKAQ?>x~$UD)4OU%si^E9w|9&>

delta 807
zcmZ`%O;6N781A&NTX(x3-CYX1z@mTx(QwlPAtuH^FhnHCX)cqp^HRI^V>2y@keEHJ
z7ZXV&{R7>^AK?%2)Polfdhkd1cK8S;+NSS3&+~rGJJVmKk4Dw5R7wgy?^k|18<Q8+
zIr8b^;m)u^6t3`sSM_VOCUMcL(>iKJ&!nbY8?=F|?lt`uZ4m`3BZV43U}{9D1y;YD
zPJ=Nf=xL-gIp=rU%9u!0+Ekzh*62UpA-eMdZC)Oe&qQ>un87P!m3F}F&*C?i&O>KR
zc$L@ARczCO4zF{QH_kQMg>Je4_5NMC0jqy6U4-rpzU4`mpm3!xfzF$}g|&9`_DfLW
zQ<5S}m$`+lruobV1?Rgjl{P9JJ}Z?6Qkg?#o_D3P!i%q!wS~kZ^vN2@bT@EgW)B8?
zNSX&>Y{zckY`Y%p*a7!IP~+MDK0AEza*Mv&+oI|rO}>+F1ru*an8{alv9gRXQuFIl
zMKk%SZfqNl2u}v<(ng{#L;p4nq?ze~WA{#(jANb~#j7Y^mue+%wdap7``jeUys8^;
zc*g{AS3oa*bSue1ytbPB(83`#dSP(vI;`i}QABla$M%sOfyn=?tmuV~gOg@z7}1Hr
zX?&K|ucY-imy<`LoJZ=61-1{2Wf~q6Egy@}XW>yFJ7;?A`fwHokZBIYRL2VJ7|$-#
z{p8C8J7{77(aKG}G4Zcq^i4nHCmuW{7!hrtnIXpYt0LA4s*c<ux@u|FWOuToX*&4>
DQ<uoL

diff --git a/app/__pycache__/config.cpython-39.pyc b/app/__pycache__/config.cpython-39.pyc
index 73aca1054c3407cfcd576678dfac87014fce4885..cb89a6fbf72d3d52b959f88b8499b4ea48880b5b 100644
GIT binary patch
literal 1297
zcmb7DOK%e~5ca;3&E~=O$@|Tv2O1s{2ZT^Vvn_#;M9Bt(FV-q{OVn*PcsE59aVmd-
zdvoN-f8Z~0@s$%2zkm}nPRm1Z!7G3IzM1ii*B(dZvPWQi{`hVCy-mm$6u%F!ku{iU
z7l0FP#DtPf!cA_yBiuSLsR7F74k$+$2NpF!=Xf4;UTaH`Lz}x(gBNy8`AAsQ8QH?5
z4mWya#rq0*No#=k`*1+4!Aw5^2to}`sL2g#!L)^Qn8O`RO`6vn>H~L0K`W>}H4hBx
zY31?)_==i)ya>Fcd5M>Smo=~O6I1iBG9}#KG3g0yo8$A~_cdSOi@@hJU*gNa=Z|Wg
z<fnA4g(H2MpV4|z$DZZqAa;qLhd;fba_h-xYq-5Z{f%a=_n7s9^==Td$HDXc#o;Iw
zgNYQ^x!8&(adv%2yjJ=81NN}p3soUb22uPXNi%Khw7Vg-Z{NOgN6UUM=u%Hcd^kxb
zsgSA&>pHbw?^(NBKX#0xG}Y0q+LM6hX3?tHY;Ur#%{Cg%Ksj4coC;-Uaw1e2J!pnZ
z;lus8YBU~K<77KUvI;~M+x-TsbsDVSZSG%tk!9obZWX-4)!k?iC&|uayo!tVZdJjM
zR^Pn+wFLfI5w&!jq1kxS2w5lS;+ZJpmRdOW)N76AbEf^&xp@PID%Cn27B=87+O0rY
z{cydtvaDRjM$xWdOnHp$CVUbjFERFV62(Uzrye}$Z>oG4^uk7KQ<+Jsa@!&kqdn#Q
zx(#VT&nas-%A^BK<`D7-E;^hzc_pMQprM3NMyMe82=fRF03V3Fh#cX2MIYcmcfjiS
zwKTzqb<zs}u3^JhvPy<;l<>0_wL<M%I`*#@V!*mJOn^oIcp)Zqo2BOJVo$`$cvp<F
zS>uJR54K!_Xt|7V65$lW&t1;gCA3`zI0rMujk<=`|GfvlBjF|n*)SO$^?plU!R-I4
zcoiIIKdy+H7G_T+XgyWl_-C?}oIHbRaBq5N5`*Pg0Odi?vDrEQtBi8*&AQ`09$<<W
P=$e(&zUA8$BWL~qr^qmx

literal 1765
zcmbVMOK&4Z5T2f=JsvxD9t&9zT3}hphjkukS6PHm9D9<C;@HL>FQhLm%iRekj%|9z
zK{44=_E&JSkNgvULti-|@e4Rn-IIse<wTFV=BuiHepS`oY}VDF{r>E)v#G6Ve@JDq
znV{@Kk1z<TQ8dtS@<$jQXjG@hTa6kwI@UomsRf$F^cw>kpxe{|-BG&9w3$Uyb41hU
zI&U!(+e4EX*ruqh72Q8!eXZV;a<N&U>_U%z1;I3osD^clumRnKZZUi2$WzR9oKhIh
zFxO}4IqZI}V^`T6*jL9Hh11jp>?xd~9^fp?DJ@HLbNvS4rCWW8=9QjT-U3~Qu?4m~
zTVaJc!mD(JuD;dq8eN0)KN5CjG(7E}?c@A@t=v8$ZNJj;LvrMwOjjv8?M?>q^Zqbm
zy$NT}&)Jp8)EWmQY>@q+<_qhzJBXMtV?JRbD?QRon&t3tTG;50#~XvuStLOTfXFmD
z0Vy{F(rMMEPk)HxarD&&c>AS`Zf`IeolnLkIq7nH0}Ro|FK-^Ez=?z=*6voQ1;;^1
zntn^3SfFjOa_6a*gW3sEer#=RLK9xO*(70b?Bhn=7e*(n^biE*uIT_|##Eq3pMi+A
z8KQ{lbNvmvM%NnAV`FAsqq)Qu)qpvp&a*I*=Rg!~p^qYApRt$?FO^-G<EwZoQgQ!+
zO-Dl}^bi+yVMc6lik)~$hTRMHo5t5*`rkRlR8Iw>G`<okLi)pgOvne|jUc}@4SC2$
z)1@R>r8|Ee0tkcUT7(Ffkc$zW3?%jl`DxM}+<L64zt=esPUyG8pniZqX@6TQ*D8np
z@d*iA<;oE`Zd8N)pi&NlM!n6KU`L(@A>4<25Y}MyGvnNlPI)NqNRg7mjQ%j@vLv}D
zg<_^4(XtdPQpmfg>n?~#(k9uLYetVjq>!mT&sasC;lZ`@C=Y*ESL5C*wEIG@!sLGy
znvP9o&1`B=6AHjl*rGPzl)_1Ir4>$!%cU6ztS1UpcF6{#@dX>k3E|Vn3#KPYpeDQ<
z_eaB0DBR-{;FBCS+Tk>}^=iAc^>U~5a<jDcV)M?|Y5OglnM90}SKHIgqaQ^snba(|
z+ut=>RqVak`?B*re!X*f#rN*K)pA(gE4O`|<z3pJM5G>cgGpE~X84D2U%oDdq)j-4
z&{2;N{*g4@$B%z1RhiQKb19xmA#-j)s31H6+sDu&8NVb5l6((w>3NTK8LwUF(GG}3
z+L;Njr4H|mt&jo8QOE?8Qpf_7rZ!ORh<uYn#`YwUw@j};Sl%J}zwS~my6-T-zkn0{
z4+5USG|5gRvse<~s*g)MPA6}pUw<v!@%@R5PO^_mbeYA9D>dV`c;GD~NwzHTt>~Ae
Zi`3Uiy?!GfBgK4P&#mWE`BV<s`akT0lCJ;&

diff --git a/app/__pycache__/database.cpython-39.pyc b/app/__pycache__/database.cpython-39.pyc
index 93a2c49ac35a2b17ecf9af101581b9051df7872a..e9c8cba2fe486c522dfe9641cc09fcb89b5c46a8 100644
GIT binary patch
literal 848
zcmZWo&2AGh5FUGfO9+ix38@kX;I<M<U!aN_NF^?8sw@a;FRRUZ8xl6_#dheA(i1%)
z@eb{gSMrq;5>EgZ#_m=`WmcZgV|!*i-+1$G_W__h`}%7(qyRsRu_?F)hdAU5R16rY
zASH;jqDv=rmTu}2U=DMyAoZBXd_<p-1ft+4dO#de-6>W=l(ow8rqN_pnDtEw(0GMI
zj!-e8;4={eMHY17D0ks8x(61W7Tp%T7X3Y7!8cDq<||nEm^+L$Wz#emz06*Zleczq
zJf7T6-X%wqw1Zp6!z6h>o{a2vJbZH$dD{KJrP6N01?rV7g$|os%2O_w4q2}9X)ens
z5Ds2dd&_hAsY<sBUe{%zxX?j66^1wMqjfT$2^Wp;Ai4-v{qF4}75jJL`pvoaXQj&6
z)SQ$%sDOmT$I*U&!a!`}YC+6iD<+4zhvm*Vtzm)uF?t1G$R&0OnQ-F&TuhDxhkS}k
z!8Jh_xS^M1jkqG>$(mf#8^E@j05rDOkDS|*orX8sD=LmGP`y>26=kF5ytaq_RVW@|
zY~8cxvX&D()iY^*R6rkMX&2Au_1r#-{z1iyypn_deV2&nT~+3S@zdHoAPlC;Glj_=
zw8SpPx}P?@i)t8?rd%K{5swk0Al<f2>$jKULYN;wdnZ*cKian0LM_|YWh1(6psg%C
TSaP<i%7N*Jttcct8g~8ygDAP{

literal 1214
zcmZWoOK%e~5VpOKY@RKxga`)|jw_*3Ax@}5qz{A;eb5w@E<({JcEgs<?qWN%iBc}@
zm0y66k|TeFAK@#fa^Vao#!gy->ebGS$M$%>Z^mJ{TtF}mzW?m}vJm>AC$j^5=n4Gd
zIS7g<j!}R?lbCd^!0Ot8jkVv3QP&9^ux;v`qrjyu&4JF*67^{Q90wjP&?0#96gQAx
zzJPdW%O|SX?s3i%*$lHx;f{}0E=$umN;+-5Wp?CYvIf6c1|iWArkE0HNpfUSyNZl<
zrrMqAToqC8a}KV|Zv}3*uVY_0aDFc+Y#uaTzGyz%Zd}=~8XLPoW#ZqdHyZofyX%+p
z_4;0Ywcgn9b3tB5X(nNpO-&IESg>HcoCzkIf(a3&iL&3NLMpo_7*}2v3UQorsyrIX
zuoVjC+uVj+g2l}~q_UPK32RF@w*&DxffePp)8sJfd_%klQzQP&-v_SlU&dI<`l=Kq
zk!;ddQ>Wm<MzH__VH*?kdDwivc^SOdc-2KVygmejVu?OtzC?+{M+B@p(mF%hretNR
zt7v48p#n_@s^9>()|Mi)1=XHp;JaMMGzhqEFmrEE=>Ri;X9|*6^vV^iiB$rha`i^q
zx&gK@{R!z8a0$<2J_o)w25~v`MS70`@EQz>M!GT3n4IDv=pN>KgVGR>$QWU?kCF#A
zl2(5gqf>&>;I_0W8ImvPD>=h@{Q&y;lzbvdVWOAOGI$I~lkwo*oAuS&TFk<vm%Xh$
z4WpRRnoMi$I2Ei0YyTiVs`-wgLRndwDaUM4`Hhn{%XFQUlkq5#zNIiT!Ii~0pW(#N
z;hAGV$Sr^;v<m?l9#po3E12Je`G1sXdNeJD5>4_Dji7R4fM<YU{q7be3pq`X6aDZY
zW64gW2?a0E0@t-9OpC$7T?i<2Zz9aAAbki|P;=eB_z*8mp{HCq#-W_UI27+EouG3v
o{chU9l+xU2!pz)fT4I8HrJK@T%pPk<2Dt}KP_n$Dmn-D|0vY59e*gdg

diff --git a/app/__pycache__/wsgi.cpython-39.pyc b/app/__pycache__/wsgi.cpython-39.pyc
index fa54b13e7f28cd6e6074215fd397a15d1afb9529..0f350fcc38116b72b66f0be193b123bf304022c9 100644
GIT binary patch
delta 79
zcmZ3-SkIft%ge<81YbMfr29?el{FLqa#9#l7;_kM8KM{%8B&;n88n$+g4C>Jyv3YY
YP~ca@1mZ9hu>h$emWgfhte-*B0KW_n^Z)<=

delta 126
zcmb<l$H<$=%ge<81kOKSr`t{Bm5osVa#9#l7;_kM8KM{%8B!Tjn6jCQWKtOxFf9b~
zQ<#GpG+ADP^k_2PVooe5xWy44pPQJO7a#AZ$y~$)lmLn3CFZ8a$KPTuD$QHTP{all
TEn=G(EzeoZ0%Y<qaWDb^Q=J{A

diff --git a/app/app.py b/app/app.py
index 968c73e..1162544 100644
--- a/app/app.py
+++ b/app/app.py
@@ -2,23 +2,15 @@ from flask import Flask, redirect, url_for, render_template
 from views.index_views import index
 from views.user_views import user
 from views.group_views import group
-from config import app_config as config_class
-from database import init_app
+from config import app_config
 
-import logging, os, pytz
+
+import logging, os
 from logging.handlers import RotatingFileHandler
 
-# Instantiate config class
-app_config = config_class()
-
 app = Flask(__name__)
 app.config.from_object(app_config)
-app.config['TZ'] = pytz.timezone(app.config['APP_TIMEZONE'])
-init_app(app)
 
-app.config['TZ'] = pytz.timezone(app.config['APP_TIMEZONE'])
-
-# Logging
 if app.config.get('LOG_TO_FILE'):
     log_file = app.config.get('LOG_FILE_PATH', '/app/logs/app.log')
     os.makedirs(os.path.dirname(log_file), exist_ok=True)
@@ -39,7 +31,8 @@ def legacy_user_list():
 
 @app.route('/groups')
 def legacy_group_list():
-    return redirect(url_for('group.groups'))
+    return redirect(url_for('group.group_list'))
+
 
 @app.route('/')
 def index_redirect():
diff --git a/app/config.py b/app/config.py
index 132adf8..afe5756 100644
--- a/app/config.py
+++ b/app/config.py
@@ -1,10 +1,16 @@
-import os, pytz
+import os
 
 class Config:
     DEBUG = False
     TESTING = False
-    SQLALCHEMY_TRACK_MODIFICATIONS = False
-    SECRET_KEY = os.getenv('FLASK_SECRET_KEY', 'default-insecure-key')
+    SECRET_KEY = os.getenv('FLASK_SECRET_KEY', 'insecure-default-key')
+
+    # Database connection info
+    DB_HOST = os.getenv('DB_HOST', 'localhost')
+    DB_PORT = int(os.getenv('DB_PORT', '3306'))
+    DB_USER = os.getenv('DB_USER', 'radiususer')
+    DB_PASSWORD = os.getenv('DB_PASSWORD', 'radiuspass')
+    DB_NAME = os.getenv('DB_NAME', 'radius')
 
     # Logging
     LOG_TO_FILE = os.getenv('LOG_TO_FILE', 'false').lower() == 'true'
@@ -14,33 +20,18 @@ class Config:
     OUI_API_URL = os.getenv('OUI_API_URL', 'https://api.maclookup.app/v2/macs/{}')
     OUI_API_KEY = os.getenv('OUI_API_KEY', '')
     OUI_API_LIMIT_PER_SEC = int(os.getenv('OUI_API_LIMIT_PER_SEC', '2'))
-    OUI_API_DAILY_LIMIT = int(os.getenv('OUI_API_DAILY_LIMIT', '10000')) 
+    OUI_API_DAILY_LIMIT = int(os.getenv('OUI_API_DAILY_LIMIT', '10000'))
 
-    # These get set in __init__
+    # Timezone
     APP_TIMEZONE = os.getenv('APP_TIMEZONE', 'UTC')
-    TZ = pytz.timezone(APP_TIMEZONE)
-
-    def __init__(self):
-        tz_name = os.getenv('APP_TIMEZONE', 'UTC')
-        self.APP_TIMEZONE = tz_name
-        self.TZ = pytz.timezone(tz_name)
 
 class DevelopmentConfig(Config):
-    """Development configuration."""
     DEBUG = True
-    MYSQL_HOST = os.getenv('MYSQL_HOST', '192.168.60.150')
-    MYSQL_USER = os.getenv('MYSQL_USER', 'user_92z0Kj')
-    MYSQL_PASSWORD = os.getenv('MYSQL_PASSWORD', '5B3UXZV8vyrB')
-    MYSQL_DATABASE = os.getenv('MYSQL_DATABASE', 'radius_NIaIuT')
 
 class ProductionConfig(Config):
-    """Production configuration."""
-    MYSQL_HOST = os.getenv('MYSQL_HOST')
-    MYSQL_USER = os.getenv('MYSQL_USER')
-    MYSQL_PASSWORD = os.getenv('MYSQL_PASSWORD')
-    MYSQL_DATABASE = os.getenv('MYSQL_DATABASE')
+    DEBUG = False
 
-# Use the correct config based on environment
+# Runtime selection
 if os.getenv('FLASK_ENV') == 'production':
     app_config = ProductionConfig
 else:
diff --git a/app/database.py b/app/database.py
index 6a7c3ce..8806f78 100644
--- a/app/database.py
+++ b/app/database.py
@@ -1,34 +1,20 @@
 import mysql.connector
 from flask import current_app, g
-from mysql.connector import pooling
-
-# Optional: Use a pool if desired
-def init_db_pool():
-    return pooling.MySQLConnectionPool(
-        pool_name="mypool",
-        pool_size=5,
-        pool_reset_session=True,
-        host=current_app.config['MYSQL_HOST'],
-        user=current_app.config['MYSQL_USER'],
-        password=current_app.config['MYSQL_PASSWORD'],
-        database=current_app.config['MYSQL_DATABASE']
-    )
 
 def get_db():
     if 'db' not in g:
-        if 'db_pool' not in current_app.config:
-            current_app.config['db_pool'] = init_db_pool()
-        g.db = current_app.config['db_pool'].get_connection()
+        g.db = mysql.connector.connect(
+            host=current_app.config['DB_HOST'],
+            port=current_app.config['DB_PORT'],
+            user=current_app.config['DB_USER'],
+            password=current_app.config['DB_PASSWORD'],
+            database=current_app.config['DB_NAME']
+        )
     return g.db
 
-def close_db(e=None):
-    db = g.pop('db', None)
-    if db is not None:
-        try:
-            db.close()  # returns connection to the pool
-        except Exception as err:
-            print(f"[DB Cleanup] Failed to close DB connection: {err}")
-
-
 def init_app(app):
-    app.teardown_appcontext(close_db)
+    @app.teardown_appcontext
+    def close_connection(exception):
+        db = g.pop('db', None)
+        if db is not None:
+            db.close()
diff --git a/app/db_interface.py b/app/db_interface.py
new file mode 100644
index 0000000..e47dc2f
--- /dev/null
+++ b/app/db_interface.py
@@ -0,0 +1,272 @@
+from flask import current_app
+import mysql.connector
+import datetime
+import requests
+import time
+import os
+
+def get_connection():
+    return mysql.connector.connect(
+        host=current_app.config['DB_HOST'],
+        user=current_app.config['DB_USER'],
+        password=current_app.config['DB_PASSWORD'],
+        database=current_app.config['DB_NAME']
+    )
+
+
+def get_all_users():
+    conn = get_connection()
+    cursor = conn.cursor(dictionary=True)
+    cursor.execute("""
+        SELECT u.*, g.vlan_id AS group_vlan_id, g.description AS group_description,
+            mv.vendor_name
+        FROM users u
+        LEFT JOIN groups g ON u.vlan_id = g.vlan_id
+        LEFT JOIN mac_vendors mv
+        ON SUBSTRING(REPLACE(REPLACE(u.mac_address, ':', ''), '-', ''), 1, 6) = mv.mac_prefix
+    """)
+    users = cursor.fetchall()
+    cursor.close()
+    conn.close()
+    return users
+
+
+
+def get_all_groups():
+    conn = get_connection()
+    cursor = conn.cursor(dictionary=True)
+    cursor.execute("""
+        SELECT g.*, (
+            SELECT COUNT(*) FROM users WHERE vlan_id = g.vlan_id
+        ) AS user_count
+        FROM groups g
+        ORDER BY g.vlan_id
+    """)
+    groups = cursor.fetchall()
+    cursor.close()
+    conn.close()
+    return groups
+
+
+
+def get_group_by_name(name):
+    conn = get_connection()
+    cursor = conn.cursor(dictionary=True)
+    cursor.execute("SELECT * FROM groups WHERE name = %s", (name,))
+    group = cursor.fetchone()
+    cursor.close()
+    conn.close()
+    return group
+
+
+def add_group(vlan_id, description):
+    conn = get_connection()
+    cursor = conn.cursor()
+    cursor.execute("INSERT INTO groups (vlan_id, description) VALUES (%s, %s)", (vlan_id, description))
+    conn.commit()
+    cursor.close()
+    conn.close()
+
+
+def update_group_description(vlan_id, description):
+    conn = get_connection()
+    cursor = conn.cursor()
+    cursor.execute("UPDATE groups SET description = %s WHERE id = %s", (description, vlan_id))
+    conn.commit()
+    cursor.close()
+    conn.close()
+
+
+def delete_group(vlan_id):
+    conn = get_connection()
+    cursor = conn.cursor()
+    cursor.execute("DELETE FROM groups WHERE id = %s", (vlan_id,))
+    conn.commit()
+    cursor.close()
+    conn.close()
+
+
+def duplicate_group(vlan_id):
+    conn = get_connection()
+    cursor = conn.cursor(dictionary=True)
+    cursor.execute("SELECT vlan_id, description FROM groups WHERE id = %s", (vlan_id,))
+    group = cursor.fetchone()
+
+    if group:
+        new_vlan_id = int(group['vlan_id']) + 1  # Auto-increment logic
+        new_description = f"{group['description']} Copy" if group['description'] else None
+        cursor.execute("INSERT INTO groups (vlan_id, description) VALUES (%s, %s)", (new_vlan_id, new_description))
+        conn.commit()
+
+    cursor.close()
+    conn.close()
+
+
+def add_user(mac_address, description, vlan_id):
+    conn = get_connection()
+    cursor = conn.cursor()
+    cursor.execute(
+        "INSERT INTO users (mac_address, description, vlan_id) VALUES (%s, %s, %s)",
+        (mac_address.lower(), description, vlan_id)
+    )
+    conn.commit()
+    cursor.close()
+    conn.close()
+
+
+def update_user_description(mac_address, description):
+    conn = get_connection()
+    cursor = conn.cursor()
+    cursor.execute("UPDATE users SET description = %s WHERE mac_address = %s", (description, mac_address.lower()))
+    conn.commit()
+    cursor.close()
+    conn.close()
+
+
+def update_user_vlan(mac_address, vlan_id):
+    conn = get_connection()
+    cursor = conn.cursor()
+    cursor.execute("UPDATE users SET vlan_id = %s WHERE mac_address = %s", (vlan_id, mac_address.lower()))
+    conn.commit()
+    cursor.close()
+    conn.close()
+
+
+def delete_user(mac_address):
+    conn = get_connection()
+    cursor = conn.cursor()
+    cursor.execute("DELETE FROM users WHERE mac_address = %s", (mac_address.lower(),))
+    conn.commit()
+    cursor.close()
+    conn.close()
+
+
+def get_latest_auth_logs(result, limit=10):
+    conn = get_connection()
+    cursor = conn.cursor(dictionary=True)
+    cursor.execute(
+        "SELECT * FROM auth_logs WHERE result = %s ORDER BY timestamp DESC LIMIT %s",
+        (result, limit)
+    )
+    logs = cursor.fetchall()
+    cursor.close()
+    conn.close()
+    return logs
+
+
+def get_vendor_info(mac):
+    conn = get_connection()
+    cursor = conn.cursor(dictionary=True)
+    prefix = mac.lower().replace(":", "").replace("-", "")[:6]
+
+    cursor.execute("SELECT vendor FROM mac_vendors WHERE prefix = %s", (prefix,))
+    row = cursor.fetchone()
+    cursor.close()
+    conn.close()
+
+    return row['vendor'] if row else "Unknown Vendor"
+
+
+def get_summary_counts():
+    conn = get_connection()
+    cursor = conn.cursor(dictionary=True)
+
+    cursor.execute("SELECT COUNT(*) AS count FROM users")
+    total_users = cursor.fetchone()['count']
+
+    cursor.execute("SELECT COUNT(*) AS count FROM groups")
+    total_groups = cursor.fetchone()['count']
+
+    cursor.close()
+    conn.close()
+    return total_users, total_groups
+
+def update_description(mac_address, description):
+    conn = get_connection()
+    cursor = conn.cursor()
+    cursor.execute(
+        "UPDATE users SET description = %s WHERE mac_address = %s",
+        (description, mac_address.lower())
+    )
+    conn.commit()
+    cursor.close()
+    conn.close()
+
+def update_vlan(mac_address, vlan_id):
+    conn = get_connection()
+    cursor = conn.cursor()
+    cursor.execute(
+        "UPDATE users SET vlan_id = %s WHERE mac_address = %s",
+        (vlan_id, mac_address.lower())
+    )
+    conn.commit()
+    cursor.close()
+    conn.close()
+
+def refresh_vendors():
+    conn = get_connection()
+    cursor = conn.cursor(dictionary=True)
+
+    # Fetch all MACs from users table that are missing vendor data
+    cursor.execute("""
+        SELECT DISTINCT SUBSTRING(REPLACE(REPLACE(mac_address, ':', ''), '-', ''), 1, 6) AS mac_prefix
+        FROM users
+        WHERE NOT EXISTS (
+            SELECT 1 FROM mac_vendors WHERE mac_prefix = SUBSTRING(REPLACE(REPLACE(users.mac_address, ':', ''), '-', ''), 1, 6)
+        )
+    """)
+    prefixes = [row['mac_prefix'].lower() for row in cursor.fetchall()]
+    cursor.close()
+
+    if not prefixes:
+        conn.close()
+        return
+
+    url_template = current_app.config.get("OUI_API_URL", "https://api.maclookup.app/v2/macs/{}")
+    api_key = current_app.config.get("OUI_API_KEY", "")
+    rate_limit = int(current_app.config.get("OUI_API_LIMIT_PER_SEC", 2))
+    daily_limit = int(current_app.config.get("OUI_API_DAILY_LIMIT", 10000))
+
+    headers = {"Authorization": f"Bearer {api_key}"} if api_key else {}
+
+    inserted = 0
+    cursor = conn.cursor()
+
+    for i, prefix in enumerate(prefixes):
+        if inserted >= daily_limit:
+            break
+
+        try:
+            url = url_template.format(prefix)
+            response = requests.get(url, headers=headers)
+            if response.status_code == 200:
+                data = response.json()
+                vendor_name = data.get("company", "not found")
+                status = "found"
+            elif response.status_code == 404:
+                vendor_name = "not found"
+                status = "not_found"
+            else:
+                print(f"Error {response.status_code} for {prefix}")
+                continue  # skip insert on unexpected status
+
+            cursor.execute("""
+                INSERT INTO mac_vendors (mac_prefix, vendor_name, status, last_checked, last_updated)
+                VALUES (%s, %s, %s, NOW(), NOW())
+                ON DUPLICATE KEY UPDATE
+                    vendor_name = VALUES(vendor_name),
+                    status = VALUES(status),
+                    last_checked = NOW(),
+                    last_updated = NOW()
+            """, (prefix, vendor_name, status))
+            conn.commit()
+            inserted += 1
+
+        except Exception as e:
+            print(f"Error fetching vendor for {prefix}: {e}")
+            continue
+
+        time.sleep(1.0 / rate_limit)
+
+    cursor.close()
+    conn.close()
diff --git a/app/templates/base.html b/app/templates/base.html
index 2507dc5..a97dbe4 100644
--- a/app/templates/base.html
+++ b/app/templates/base.html
@@ -1,245 +1,152 @@
 <!DOCTYPE html>
 <html lang="en">
 <head>
-  <link rel="icon" href="/static/favicon.ico" type="image/x-icon">
-  <meta name="description" content="FreeRADIUS Web Manager">
-  <meta name="author" content="Simon Cloutier">
-  <meta property="og:title" content="FreeRADIUS Manager">
-  <meta property="og:description" content="Manage FreeRADIUS MAC authentication visually">
-  <meta property="og:type" content="website">
-  <meta charset="UTF-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <title>{% block title %}FreeRADIUS Manager{% endblock %}</title>
-  <style>
-    :root {
-      --bg: #ffffff;
-      --fg: #000000;
-      --cell-bg: #f5f5f5;
-      --th-bg: #e0e0e0;
-    }
+    <meta charset="UTF-8">
+    <title>{% block title %}RadMac{% endblock %}</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <style>
+        :root {
+            --bg: #121212;
+            --fg: #f0f0f0;
+            --accent: #4caf50;
+            --cell-bg: #1e1e1e;
+            --card-bg: #2c2c2c;
+        }
 
-    [data-theme="dark"] {
-      --bg: #121212;
-      --fg: #e0e0e0;
-      --cell-bg: #1e1e1e;
-      --th-bg: #2c2c2c;
-    }
+        [data-theme="light"] {
+            --bg: #f8f9fa;
+            --fg: #212529;
+            --accent: #28a745;
+            --cell-bg: #ffffff;
+            --card-bg: #e9ecef;
+        }
 
-    body {
-      background-color: var(--bg);
-      color: var(--fg);
-      font-family: sans-serif;
-      margin: 0;
-      padding: 0;
-    }
+        body {
+            background-color: var(--bg);
+            color: var(--fg);
+            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
+            margin: 0;
+            padding: 1rem 2rem;
+        }
 
-    nav {
-      background-color: var(--th-bg);
-      padding: 10px;
-      display: flex;
-      align-items: center;
-    }
+        nav {
+            background-color: var(--card-bg);
+            padding: 1rem;
+            border-bottom: 1px solid #666;
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+        }
 
-    nav a {
-      margin-right: 10px;
-      text-decoration: none;
-      padding: 5px 10px;
-      border: 1px solid #ccc;
-      border-radius: 5px;
-      color: var(--fg);
-    }
+        nav .links a {
+            margin-right: 1rem;
+            color: var(--fg);
+            text-decoration: none;
+            font-weight: bold;
+        }
 
-    nav a.active {
-      background-color: var(--cell-bg);
-    }
+        nav .links a:hover {
+            text-decoration: underline;
+        }
 
-    .content {
-      padding: 20px;
-    }
+        nav .right {
+            display: flex;
+            align-items: center;
+        }
 
-    #theme-toggle {
-      margin-left: auto;
-      cursor: pointer;
-      padding: 5px 10px;
-      border-radius: 5px;
-      border: 1px solid #ccc;
-      background-color: var(--cell-bg);
-      color: var(--fg);
-    }
+        button#theme-toggle {
+            background: none;
+            border: 1px solid var(--fg);
+            padding: 4px 8px;
+            color: var(--fg);
+            cursor: pointer;
+            border-radius: 4px;
+        }
 
-    .styled-table {
-      border-collapse: collapse;
-      width: 100%;
-      margin-bottom: 2rem;
-      background-color: var(--bg);
-      color: var(--fg);
-      transition: all 0.3s ease;
-    }
+        h1, h2, h3 {
+            color: var(--fg);
+        }
 
-    .styled-table th,
-    .styled-table td {
-      border: 1px solid #444;
-      padding: 8px;
-      text-align: left;
-    }
+        .toast {
+            position: fixed;
+            bottom: 20px;
+            right: 20px;
+            background-color: var(--accent);
+            color: white;
+            padding: 10px 16px;
+            border-radius: 6px;
+            box-shadow: 0 2px 10px rgba(0, 0, 0, 0.4);
+            opacity: 0;
+            transition: opacity 0.5s ease;
+            z-index: 9999;
+        }
 
-    .styled-table input,
-    .styled-table select {
-      background-color: var(--cell-bg);
-      color: var(--fg);
-      border: 1px solid #666;
-      padding: 4px;
-      border-radius: 4px;
-      transition: background-color 0.3s;
-    }
+        .toast.show {
+            opacity: 1;
+        }
 
-    .styled-table input:focus,
-    .styled-table select:focus {
-      background-color: #555;
-      outline: none;
-    }
+        table.styled-table {
+            border-collapse: collapse;
+            width: 100%;
+            margin-top: 1rem;
+            background-color: var(--cell-bg);
+        }
 
-    .styled-table thead {
-      background-color: var(--th-bg);
-      position: sticky;
-      top: 0;
-      z-index: 1;
-    }
+        .styled-table th, .styled-table td {
+            padding: 8px 12px;
+            border: 1px solid #555;
+        }
 
-    .styled-table tbody tr:hover {
-      background-color: rgba(255, 255, 255, 0.05);
-    }
-
-    .icon-button {
-      background-color: var(--cell-bg);
-      color: var(--fg);
-      border: 1px solid #666;
-      border-radius: 4px;
-      padding: 4px 8px;
-      margin: 2px;
-      cursor: pointer;
-      font-size: 1rem;
-      transition: background-color 0.2s, transform 0.2s;
-    }
-
-    .icon-button:hover {
-      background-color: #555;
-      transform: scale(1.05);
-    }
-
-    .icon-button.pulse {
-      animation: pulse 2s infinite;
-    }
-
-    @keyframes pulse {
-      0% { box-shadow: 0 0 0 0 rgba(50, 205, 50, 0.4); }
-      70% { box-shadow: 0 0 0 10px rgba(50, 205, 50, 0); }
-      100% { box-shadow: 0 0 0 0 rgba(50, 205, 50, 0); }
-    }
-
-    .page-title {
-      margin-bottom: 1rem;
-      color: var(--fg);
-    }
-
-    .merged-cell {
-      border: none;
-    }
-
-    .fade-in {
-      animation: fadeIn 0.5s ease-in;
-    }
-
-    @keyframes fadeIn {
-      from { opacity: 0; transform: translateY(-10px); }
-      to { opacity: 1; transform: translateY(0); }
-    }
-
-    #toast-container {
-      position: fixed;
-      bottom: 20px;
-      right: 20px;
-      z-index: 1000;
-    }
-
-    .toast {
-      background-color: #444;
-      color: #fff;
-      padding: 10px 16px;
-      margin-top: 10px;
-      border-radius: 4px;
-      box-shadow: 0 0 10px rgba(0,0,0,0.2);
-      opacity: 0.95;
-      animation: fadein 0.5s, fadeout 0.5s 2.5s;
-    }
-
-    @keyframes fadein {
-      from { opacity: 0; right: 0; }
-      to { opacity: 0.95; }
-    }
-
-    @keyframes fadeout {
-      from { opacity: 0.95; }
-      to { opacity: 0; }
-    }
-  </style>
+        .styled-table th {
+            background-color: var(--card-bg);
+            color: var(--fg);
+        }
+    </style>
 </head>
 <body>
-  <nav>
-    <a href="/" {% if request.path == '/' %}class="active"{% endif %}>Home</a>
-    <a href="/user/user_list" {% if request.path.startswith('/user') %}class="active"{% endif %}>User List</a>
-    <a href="/group/groups" {% if request.path.startswith('/group') %}class="active"{% endif %}>Group List</a>
-    <a href="/stats" {% if request.path.startswith('/stats') %}class="active"{% endif %}>Stats</a>
-    <button id="theme-toggle" onclick="toggleTheme()">🌓</button>
-  </nav>
+    <nav>
+        <div class="links">
+            <a href="/">Home</a>
+            <a href="/user_list">Users</a>
+            <a href="/group">Groups</a>
+            <a href="/stats">Stats</a>
+        </div>
+        <div class="right">
+            <button id="theme-toggle">🌓 Theme</button>
+        </div>
+    </nav>
 
-  <div class="content">
-    {% block content %}{% endblock %}
-  </div>
+    {% block content %}
+    {% endblock %}
 
-  <div id="toast-container"></div>
+    <div id="toast" class="toast"></div>
 
-  <script>
-    function showToast(message) {
-      const toast = document.createElement('div');
-      toast.textContent = message;
-      toast.style.cssText = `
-        position: fixed;
-        bottom: 1rem;
-        left: 50%;
-        transform: translateX(-50%);
-        background: var(--cell-bg, #333);
-        color: var(--fg, #fff);
-        padding: 10px 20px;
-        border-radius: 6px;
-        box-shadow: 0 2px 10px rgba(0,0,0,0.2);
-        z-index: 9999;
-        font-weight: bold;
-      `;
-      document.body.appendChild(toast);
-      setTimeout(() => toast.remove(), 3000);
-    }
-    function toggleTheme() {
-      const current = document.body.dataset.theme || 'light';
-      const next = current === 'light' ? 'dark' : 'light';
-      document.body.dataset.theme = next;
-      localStorage.setItem('theme', next);
-    }
+    <script>
+        // Theme toggle logic
+        const toggleBtn = document.getElementById('theme-toggle');
+        const userPref = localStorage.getItem('theme');
 
-    window.onload = () => {
-      document.body.dataset.theme = localStorage.getItem('theme') || 'light';
-    };
-  </script>
- 
- <script>
-  {% with messages = get_flashed_messages(with_categories=true) %}
-    {% if messages %}
-      {% for category, message in messages %}
-        showToast("{{ message }}");
-      {% endfor %}
-    {% endif %}
-  {% endwith %}
-</script>
- 
+        if (userPref) {
+            document.documentElement.setAttribute('data-theme', userPref);
+        }
+
+        toggleBtn.addEventListener('click', () => {
+            const current = document.documentElement.getAttribute('data-theme');
+            const next = current === 'light' ? 'dark' : 'light';
+            document.documentElement.setAttribute('data-theme', next);
+            localStorage.setItem('theme', next);
+        });
+
+        // Toast display function
+        function showToast(message, duration = 3000) {
+            const toast = document.getElementById('toast');
+            toast.textContent = message;
+            toast.classList.add('show');
+            setTimeout(() => toast.classList.remove('show'), duration);
+        }
+
+        // Make toast function globally available
+        window.showToast = showToast;
+    </script>
 </body>
 </html>
diff --git a/app/templates/group_list.html b/app/templates/group_list.html
index 46ebb36..6f349cf 100644
--- a/app/templates/group_list.html
+++ b/app/templates/group_list.html
@@ -1,183 +1,52 @@
 {% extends 'base.html' %}
-{% block title %}Group List{% endblock %}
+{% block title %}VLAN Groups{% endblock %}
 
 {% block content %}
-<h1 class="page-title">Group List</h1>
+<h1 class="page-title">VLAN Groups</h1>
 
-<table class="styled-table fade-in">
+<form method="POST" action="{{ url_for('group.add_group_route') }}" style="margin-bottom: 1rem;">
+  <input type="text" name="vlan_id" placeholder="VLAN ID" required pattern="[0-9]+" style="width: 80px;">
+  <input type="text" name="description" placeholder="Group Description">
+  <button type="submit">➕ Add Group</button>
+</form>
+
+<table class="styled-table">
   <thead>
     <tr>
-      <th>Group Name</th>
-      <th>Attribute</th>
-      <th>Op</th>
-      <th>Value</th>
+      <th>VLAN ID</th>
+      <th>Description</th>
+      <th>User Count</th>
       <th>Actions</th>
     </tr>
   </thead>
-  <tbody id="group-body">
-    <!-- New Group Entry Row -->
-    <tr class="new-row">
-      <td rowspan="1"><input type="text" id="new-groupname" placeholder="New group" /></td>
-      <td><input type="text" class="new-attribute" placeholder="Attribute"></td>
-      <td>
-        <select class="new-op">
-          <option value="">Op</option>
-          <option value="=">=</option>
-          <option value="!=">!=</option>
-          <option value=">">&gt;</option>
-          <option value="<">&lt;</option>
-          <option value=">=">&gt;=</option>
-          <option value="<=">&lt;=</option>
-        </select>
-      </td>
-      <td><input type="text" class="new-value" placeholder="Value"></td>
-      <td>
-        <button class="icon-button pulse" onclick="saveNewGroup()" title="Save Group">💾</button>
-        <button class="icon-button" onclick="addAttributeRow()" title="Add Attribute">➕</button>
-      </td>
-    </tr>
-
-    {% for groupname, attributes in grouped_results.items() %}
+  <tbody>
+    {% for group in groups %}
     <tr>
-      <td><input type="text" id="groupname-{{ groupname }}" value="{{ groupname }}" disabled></td>
-      <td colspan="3" class="merged-cell"></td>
+      <td>{{ group.vlan_id }}</td>
       <td>
-        <button class="icon-button" onclick="enableEdit('{{ groupname }}')" title="Edit">✏️</button>
-        <button class="icon-button" onclick="updateGroupName('{{ groupname }}')" title="Save">💾</button>
-        <button class="icon-button" onclick="location.reload()" title="Cancel">❌</button>
-        <a class="icon-button" href="{{ url_for('group.delete_group_rows', groupname=groupname) }}" onclick="saveScrollPosition()" title="Delete Group">🗑️</a>
-        <button class="icon-button" onclick="duplicateToNewGroup('{{ groupname }}')" title="Duplicate">📄</button>
+        <form method="POST" action="{{ url_for('group.update_description_route') }}" class="inline-form">
+          <input type="hidden" name="group_id" value="{{ group.vlan_id }}">
+          <input type="text" name="description" value="{{ group.description or '' }}">
+          <button type="submit" title="Save">💾</button>
+        </form>
+      </td>
+      <td>{{ group.user_count }}</td>
+      <td>
+        <form method="POST" action="{{ url_for('group.delete_group_route') }}" onsubmit="return confirm('Delete this group?');">
+          <input type="hidden" name="group_id" value="{{ group.vlan_id }}">
+          <button type="submit">❌</button>
+        </form>
       </td>
     </tr>
-    {% for attribute in attributes %}
-    <tr>
-      <td class="merged-cell"></td>
-      <td><input type="text" id="attribute-{{ attribute.id }}" value="{{ attribute.attribute }}"></td>
-      <td>
-        <select id="op-{{ attribute.id }}">
-          <option value="=" {% if attribute.op == '=' %}selected{% endif %}>=</option>
-          <option value="!=" {% if attribute.op == '!=' %}selected{% endif %}>!=</option>
-          <option value=">" {% if attribute.op == '>' %}selected{% endif %}>&gt;</option>
-          <option value="<" {% if attribute.op == '<' %}selected{% endif %}>&lt;</option>
-          <option value=">=" {% if attribute.op == '>=' %}selected{% endif %}>&gt;=</option>
-          <option value="<=" {% if attribute.op == '<=' %}selected{% endif %}>&lt;=</option>
-        </select>
-      </td>
-      <td><input type="text" id="value-{{ attribute.id }}" value="{{ attribute.value }}"></td>
-      <td>
-        <button class="icon-button" onclick="updateAttribute('{{ attribute.id }}')" title="Save">💾</button>
-        <button class="icon-button" onclick="location.reload()" title="Reset">❌</button>
-        <a class="icon-button" href="{{ url_for('group.delete_group', group_id=attribute.id) }}" onclick="saveScrollPosition()" title="Delete">🗑️</a>
-      </td>
-    </tr>
-    {% endfor %}
     {% endfor %}
   </tbody>
 </table>
 
-<script>
-function enableEdit(groupname) {
-  const input = document.getElementById(`groupname-${groupname}`);
-  input.disabled = false;
-  input.focus();
+<style>
+form.inline-form {
+  display: inline-flex;
+  gap: 4px;
+  align-items: center;
 }
-
-function saveScrollPosition() {
-  sessionStorage.setItem("scrollPosition", window.scrollY);
-}
-
-function addAttributeRow() {
-  const table = document.getElementById("group-body");
-  const row = document.createElement("tr");
-  row.classList.add("new-attribute-row");
-  row.innerHTML = `
-    <td class="merged-cell"></td>
-    <td><input type="text" class="new-attribute" placeholder="Attribute"></td>
-    <td>
-      <select class="new-op">
-        <option value="">Op</option>
-        <option value="=">=</option>
-        <option value="!=">!=</option>
-        <option value=">">&gt;</option>
-        <option value="<">&lt;</option>
-        <option value=">=">&gt;=</option>
-        <option value="<=">&lt;=</option>
-      </select>
-    </td>
-    <td><input type="text" class="new-value" placeholder="Value"></td>
-    <td><button class="icon-button" onclick="this.closest('tr').remove()" title="Remove">🗑️</button></td>
-  `;
-  table.insertBefore(row, table.querySelector(".new-row").nextSibling);
-}
-
-function saveNewGroup() {
-  const groupname = document.getElementById("new-groupname").value;
-  const attributes = [];
-  const attrInputs = document.querySelectorAll(".new-attribute");
-
-  attrInputs.forEach((attrInput, index) => {
-    const attribute = attrInput.value;
-    const op = document.querySelectorAll(".new-op")[index].value;
-    const value = document.querySelectorAll(".new-value")[index].value;
-
-    if (attribute && op && value) {
-      attributes.push({ attribute, op, value });
-    }
-  });
-
-  if (!groupname || attributes.length === 0) {
-    showToast("Group name and at least one attribute required.");
-    return;
-  }
-
-  fetch("/group/save_group", {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ groupname, attributes })
-  })
-  .then(res => res.json())
-  .then(data => {
-    if (data.success) {
-      showToast("Group saved.");
-      setTimeout(() => location.reload(), 800);
-    } else {
-      showToast("Error: " + data.error);
-    }
-  });
-}
-
-function duplicateToNewGroup(groupname) {
-  fetch("/group/duplicate_group", {
-    method: "POST",
-    headers: { "Content-Type": "application/x-www-form-urlencoded" },
-    body: `groupname=${groupname}`
-  })
-  .then(res => res.json())
-  .then(data => {
-    document.getElementById("new-groupname").value = data.new_groupname;
-
-    const oldAttrRows = document.querySelectorAll(".new-attribute-row");
-    oldAttrRows.forEach(row => row.remove());
-
-    data.attributes.forEach(attr => {
-      addAttributeRow();
-      const index = document.querySelectorAll(".new-attribute").length - 1;
-      document.querySelectorAll(".new-attribute")[index].value = attr.attribute;
-      document.querySelectorAll(".new-op")[index].value = attr.op;
-      document.querySelectorAll(".new-value")[index].value = attr.value;
-    });
-
-    document.getElementById("new-groupname").scrollIntoView({ behavior: 'smooth' });
-    showToast("Fields populated from duplicated group.");
-  });
-}
-
-window.onload = function () {
-  const scrollPosition = sessionStorage.getItem("scrollPosition");
-  if (scrollPosition) {
-    window.scrollTo(0, parseInt(scrollPosition) - 100);
-    sessionStorage.removeItem("scrollPosition");
-  }
-};
-</script>
+</style>
 {% endblock %}
diff --git a/app/templates/index.html b/app/templates/index.html
index ec8c902..8b58fa3 100644
--- a/app/templates/index.html
+++ b/app/templates/index.html
@@ -1,36 +1,36 @@
 {% extends 'base.html' %}
-{% block title %}FreeRADIUS Manager{% endblock %}
+{% block title %}RadMac{% endblock %}
 
 {% block content %}
-<h1 class="page-title">FreeRADIUS Manager</h1>
+<h1 class="page-title">RadMac</h1>
 
 <div class="stats-cards">
   <div class="card neutral">
-    <strong>Total Users</strong>
+    <strong>Total MAC Addresses</strong>
     <p>{{ total_users }}</p>
   </div>
   <div class="card neutral">
-    <strong>Total Groups</strong>
+    <strong>Total VLAN Groups</strong>
     <p>{{ total_groups }}</p>
   </div>
 </div>
 
-<h2>Recent Access Accepts</h2>
+<h2>Recent Access-Accept</h2>
 <ul class="event-list green">
   {% for entry in latest_accept %}
     <li>
-      <strong>{{ entry.username }}</strong>
+      <strong>{{ entry.mac_address }}</strong>
       {% if entry.description %} ({{ entry.description }}){% endif %}
       — {{ entry.ago }}
     </li>
   {% endfor %}
 </ul>
 
-<h2>Recent Access Rejects</h2>
+<h2>Recent Access-Reject</h2>
 <ul class="event-list red">
   {% for entry in latest_reject %}
     <li>
-      <strong>{{ entry.username }}</strong>
+      <strong>{{ entry.mac_address }}</strong>
       {% if entry.description %} ({{ entry.description }}){% endif %}
       — {{ entry.ago }}
     </li>
@@ -74,7 +74,6 @@ document.getElementById('mac-lookup-form').addEventListener('submit', function(e
   margin-bottom: 1rem;
   color: var(--fg);
 }
-
 .stats-cards {
   display: flex;
   gap: 1rem;
@@ -101,7 +100,6 @@ document.getElementById('mac-lookup-form').addEventListener('submit', function(e
 }
 .event-list.green li { color: #4caf50; }
 .event-list.red li { color: #ff4d4d; }
-
 #mac-lookup-form input {
   padding: 6px;
   border-radius: 4px;
diff --git a/app/templates/stats.html b/app/templates/stats.html
index efdb0aa..c83deeb 100644
--- a/app/templates/stats.html
+++ b/app/templates/stats.html
@@ -6,7 +6,7 @@
 
 <div class="stats-container">
   <div class="card success-card">
-    <h2>Last Access-Accept Events</h2>
+    <h2>Recent Access-Accept</h2>
     <table class="styled-table small-table">
       <thead>
         <tr>
@@ -19,7 +19,7 @@
       <tbody>
         {% for entry in accept_entries %}
         <tr>
-          <td>{{ entry.username }}</td>
+          <td>{{ entry.mac_address }}</td>
           <td>{{ entry.description or '' }}</td>
           <td>{{ entry.vendor }}</td>
           <td>{{ entry.ago }}</td>
@@ -30,7 +30,7 @@
   </div>
 
   <div class="card error-card">
-    <h2>Last Access-Reject Events</h2>
+    <h2>Recent Access-Reject</h2>
     <table class="styled-table small-table">
       <thead>
         <tr>
@@ -44,20 +44,20 @@
       <tbody>
         {% for entry in reject_entries %}
         <tr>
-          <td>{{ entry.username }}</td>
+          <td>{{ entry.mac_address }}</td>
           <td>{{ entry.description or '' }}</td>
           <td>{{ entry.vendor }}</td>
           <td>{{ entry.ago }}</td>
           <td>
             {% if entry.already_exists %}
-              <span style="color: limegreen;">Already exists in {{ entry.existing_vlan or 'unknown VLAN' }}</span>
+              <span style="color: limegreen;">Already exists in VLAN {{ entry.existing_vlan or 'unknown' }}</span>
             {% else %}
               <form method="POST" action="/user/add_from_reject" style="display: flex; gap: 4px;">
-                <input type="hidden" name="username" value="{{ entry.username }}">
-                <select name="groupname" required>
+                <input type="hidden" name="mac_address" value="{{ entry.mac_address }}">
+                <select name="group_id" required>
                   <option value="">Select VLAN</option>
                   {% for group in available_groups %}
-                  <option value="{{ group }}">{{ group }}</option>
+                  <option value="{{ group.id }}">VLAN {{ group.vlan_id }}</option>
                   {% endfor %}
                 </select>
                 <button type="submit" title="Add User">💾</button>
diff --git a/app/templates/user_list.html b/app/templates/user_list.html
index 4a7dc87..cea1ca8 100644
--- a/app/templates/user_list.html
+++ b/app/templates/user_list.html
@@ -1,61 +1,62 @@
 {% extends 'base.html' %}
-{% block title %}User List{% endblock %}
+{% block title %}MAC Address List{% endblock %}
 
 {% block content %}
-<h1 class="page-title">User List</h1>
+<h1 class="page-title">MAC Address List</h1>
 
-<table class="styled-table fade-in">
+<form id="add-user-form" method="POST" action="{{ url_for('user.add') }}">
+  <input type="text" name="mac_address" placeholder="MAC address (12 hex characters)" required maxlength="12">
+  <input type="text" name="description" placeholder="Description (optional)">
+  <select name="group_id" required>
+    <option value="">Assign to VLAN</option>
+    {% for group in groups %}
+    <option value="{{ group.id }}">VLAN {{ group.vlan_id }}</option>
+    {% endfor %}
+  </select>
+  <button type="submit">➕ Add</button>
+</form>
+
+<table class="styled-table">
   <thead>
     <tr>
       <th>MAC Address</th>
-      <th>
-        Vendor
-        <button class="icon-button" onclick="refreshVendors(this)" title="Refresh Vendor">🔄</button>
-      </th>
       <th>Description</th>
-      <th>Group</th>
+      <th>Vendor <button id="refresh-vendors" title="Refresh unknown vendors">🔄</button></th>
+      <th>VLAN</th>
       <th>Actions</th>
     </tr>
   </thead>
-  <tbody id="user-body">
-    <!-- New User Row -->
-    <tr class="new-row">
-      <td><input type="text" id="new-mac" placeholder="MAC address"></td>
-      <td><em>(auto)</em></td>
-      <td><input type="text" id="new-description" placeholder="Description"></td>
-      <td>
-        <select id="new-vlan">
-          <option value="">-- Select Group --</option>
-          {% for group in groups %}
-            <option value="{{ group.groupname }}">{{ group.groupname }}</option>
-          {% endfor %}
-        </select>
-      </td>
-      <td>
-        <button class="icon-button pulse" onclick="addUser()" title="Save User">💾</button>
-        <button class="icon-button" onclick="clearUserFields()" title="Reset">❌</button>
-      </td>
-    </tr>
-
-    {% for row in results %}
+  <tbody>
+    {% for entry in users %}
     <tr>
-      <td><input type="text" value="{{ row.mac_address }}" id="mac-{{ loop.index }}" disabled></td>
-      <td>{{ row.vendor or 'Unknown Vendor' }}</td>
-      <td><input type="text" value="{{ row.description }}" id="desc-{{ loop.index }}"></td>
+      <td>{{ entry.mac_address }}</td>
       <td>
-        <select id="vlan-{{ loop.index }}">
-          {% for group in groups %}
-            <option value="{{ group.groupname }}" {% if group.groupname == row.vlan_id %}selected{% endif %}>
-              {{ group.groupname }}
-            </option>
-          {% endfor %}
-        </select>
+        <form method="POST" action="{{ url_for('user.update_description_route') }}" class="inline-form">
+          <input type="hidden" name="mac_address" value="{{ entry.mac_address }}">
+          <input type="text" name="description" value="{{ entry.description or '' }}">
+          <button type="submit" title="Save">💾</button>
+        </form>
+      </td>
+      <td>{% if entry.vendor_name %}
+        {{ entry.vendor_name }}
+      {% else %}
+        <em>Unknown</em>
+      {% endif %}</td>
+      <td>
+        <form method="POST" action="{{ url_for('user.update_vlan_route') }}" class="inline-form">
+          <input type="hidden" name="mac_address" value="{{ entry.mac_address }}">
+          <select name="group_id" onchange="this.form.submit()">
+            {% for group in groups %}
+            <option value="{{ group.id }}" {% if group.vlan_id == entry.vlan_id %}selected{% endif %}>VLAN {{ group.vlan_id }}</option>
+            {% endfor %}
+          </select>
+        </form>
       </td>
       <td>
-        <button class="icon-button" onclick="enableUserEdit({{ loop.index }})" title="Edit">✏️</button>
-        <button class="icon-button" onclick="updateUser({{ loop.index }}, '{{ row.mac_address }}')" title="Save">💾</button>
-        <button class="icon-button" onclick="location.reload()" title="Cancel">❌</button>
-        <a class="icon-button" href="/user/delete_user/{{ row.mac_address }}" onclick="saveScrollPosition()" title="Delete">🗑️</a>
+        <form method="POST" action="{{ url_for('user.delete') }}">
+          <input type="hidden" name="mac_address" value="{{ entry.mac_address }}">
+          <button type="submit" onclick="return confirm('Delete this MAC address?')">❌</button>
+        </form>
       </td>
     </tr>
     {% endfor %}
@@ -63,117 +64,22 @@
 </table>
 
 <script>
-function enableUserEdit(index) {
-  const input = document.getElementById(`mac-${index}`);
-  input.disabled = false;
-  input.focus();
-}
-
-function clearUserFields() {
-  document.getElementById("new-mac").value = "";
-  document.getElementById("new-description").value = "";
-  document.getElementById("new-vlan").selectedIndex = 0;
-}
-
-function addUser() {
-  const mac = document.getElementById("new-mac").value;
-  const desc = document.getElementById("new-description").value;
-  const vlan = document.getElementById("new-vlan").value;
-
-  if (!mac || !vlan) {
-    showToast("MAC address and group are required.");
-    return;
-  }
-
-  fetch("/user/add_user", {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ mac_address: mac, description: desc, vlan_id: vlan })
-  })
-  .then(res => res.json())
-  .then(data => {
-    if (data.success) {
-      showToast("User added.");
-      setTimeout(() => location.reload(), 800);
-    } else {
-      showToast("Error: " + data.message);
-    }
-  });
-}
-
-function updateUser(index, originalMac) {
-  const macInput = document.getElementById(`mac-${index}`);
-  const desc = document.getElementById(`desc-${index}`).value;
-  const vlan = document.getElementById(`vlan-${index}`).value;
-
-  fetch("/user/update_user", {
-    method: "POST",
-    headers: { "Content-Type": "application/x-www-form-urlencoded" },
-    body: `mac_address=${originalMac}&new_mac_address=${macInput.value}&description=${desc}&vlan_id=${vlan}`
-  })
-  .then(res => res.text())
-  .then(data => {
-    if (data === "success") {
-      showToast("User updated.");
-      setTimeout(() => location.reload(), 800);
-    } else {
-      showToast("Update failed: " + data);
-    }
-  });
-}
-
-// function refreshVendors() {
-//   showToast("Refreshing vendor info...");
-//   fetch("/user/refresh_vendors", {
-//     method: "POST"
-//   })
-//   .then(res => res.json())
-//   .then(data => {
-//     showToast(data.message || "Refreshed.");
-//     setTimeout(() => location.reload(), 1200);
-//   })
-//   .catch(() => showToast("Failed to refresh vendor info."));
-// }
-
-function refreshVendors(btn) {
-  btn.disabled = true;
-  showToast("Refreshing vendor info...");
-
-  function refreshCycle() {
-    fetch("/user/refresh_vendors", { method: "POST" })
-      .then(res => res.json())
-      .then(data => {
-        if (data.success) {
-          showToast(`Updated ${data.updated} vendors`);
-          if (data.remaining) {
-            setTimeout(refreshCycle, 1500);  // Pause before next batch
-          } else {
-            showToast("Vendor refresh complete.");
-            setTimeout(() => location.reload(), 1000);
-          }
-        } else {
-          showToast("Refresh failed: " + data.message);
-        }
-      })
-      .catch(err => {
-        console.error(err);
-        showToast("Error during vendor refresh.");
-      });
-  }
-
-  refreshCycle();
-}
-
-function saveScrollPosition() {
-  sessionStorage.setItem("scrollPosition", window.scrollY);
-}
-
-window.onload = function () {
-  const scroll = sessionStorage.getItem("scrollPosition");
-  if (scroll) {
-    window.scrollTo(0, parseInt(scroll) - 100);
-    sessionStorage.removeItem("scrollPosition");
-  }
-};
+document.getElementById('refresh-vendors').addEventListener('click', function () {
+  fetch("{{ url_for('user.refresh') }}", { method: "POST" })
+    .then(res => res.json())
+    .then(data => {
+      alert("Vendor refresh complete.");
+      window.location.reload();
+    })
+    .catch(err => alert("Error: " + err));
+});
 </script>
+
+<style>
+form.inline-form {
+  display: inline-flex;
+  gap: 4px;
+  align-items: center;
+}
+</style>
 {% endblock %}
diff --git a/app/views/__pycache__/group_views.cpython-39.pyc b/app/views/__pycache__/group_views.cpython-39.pyc
index 0e8d25584a77ebebfeb32bfa5bacb1cdb17c1b51..698c73c1e576ad4748d85962511c929e1996a97a 100644
GIT binary patch
literal 1348
zcmb_c&2rN)5SC;+cAVd)EwoVJoJ;Zo48zcSV5XdW@tCgKy4Z=4l>(Xc6s~=T_ShRw
zz=P<@i5Z@tCwApFb$doLUa!{D>ic#-Iq7slhU3@IzsI4=*l(KDhli85_>`AufC0}~
z&Lf_SNaRlB<Zk5VUgUB5CbCBEM}8heLEem-c^HM9Ne+%|feYS+6SZagvIC7P4n71w
z*osG8**@(+6T)K-tqTEd=-7DA#=Gly5BfIVxABd2d;ps^z5!bYY`FagQL>?Dn(wl?
zEL1wxrl;f-q>8o7i!9O7_)316%Tk*_Nl2AE)W)ByEIyj4p=-LwQpZV_#m8zkFG|x)
z04m??%nQH-)hq^C9;&p^>1=A+ATxRQ#dvn>qA|AbAvYnVFO)n=zuoZhAz{25938AX
z+sCIIpwVo_&Y9-GmsrsYfvlX#qGwaZSz7ARiO#cYZW<N9p-?_<Qx2Ifnro)|_`2C0
zCq*$nOXb(H0uoz)RD3t#eKy)#5&$L|ToHhUJ4VXJ{qX+aBVzY+sZVB5K0qyS-5T`>
zCz_oi;$1?H-lYHm&XqXl+F7zCUkT2%t37a6e8rKGH!=QMmQ3RmOsif<cGI`mM)wGZ
z4Mj&87yFYN2iv0poGVhMYM{XiY}*Ak5plN#P#YBNt=ku4Keg;&u%!J=guKf`uJ+Jh
zY>sbxTLbgI83z@o6x0(uQavTJgXWf?+NHoVGEFjdelIBSoXjJ7cap5Zu6R;K9`byN
zk%d35l=^@hX^`ZzPkU%tt(#(rw-meQXcxq7_ne8cfGl{=cBcYQzmghmUM+hBc~HMA
z6<EqvQY)z`0avfkn+ylWJIa#svm&)s`X(XVAAr~HQ;b(!s-xskR@cBv!`6?$m>`a)
zNiO49wP@;D4Op4mzAIvDkE<2d;<e%lUgtBIXYvhIsN6!c$9F{633%wCcKqu32lxmq
A(*OVf

literal 5886
zcmbVQ+ix6K8J{_G*^AfLrb(R!7`aW81=n_=YC~{BZf=QG+^BY`SgEo$duHQJXT9q)
zvu!<^jRdLsfK*f@#7i5=MyOI=5D)wVyzvJhgyxkOED#UC1Bxi{`@Wf-y?7lJb~R_t
zIdi^q{r$ensZLH7HT;5q{`pS*X-)eh6$XDM3Rm#>e?THNse4*eujoxt5ly3FG|h_H
zv?^B9uGl(#7hbNJujDyzc!f&Q)uri9+!vLSTiTzL)`2c<nfpMyuUDqr(%ng!mxVjJ
zEPf>9ge-CWG}ljN^;2@1>u0!rCaa&7b6h{mJwJh-Psk^^W{zu4qUMx*iff)=+4)TN
zw0xTDPe@}!E1x;U>a?;Q7p{37x2+mGK|HP89qFpAz-_j@YT(8><?eP|KZx_nl?~<A
zf;iVv-d4S(;@n-owbQ8YmG#)Z;|5#u_IhmHQLRop%q{cVuh9^_Uk(}C`0IH57)hYr
z*ScDysozK1zJ8!}^{^f3`$FmmIyO^C;{y$4<3PKCt?P=0)-@t=LwkF%YjQg?GVA(*
z(9>33OIj>rQTxb<%vEjo0$Q2}8ro>dJFui388Y{gcuU*ROf9hQ=I-YAey3|)9B24a
zP>}h^{zQ8q?qe3?q#IfyZEN4h@ptWe_D1?%(N;8Bz~&a$!^MrY*Ve9YIyY`^Y~EZ)
zhPPy=+H{>)-gy1Hj;czoscpNpcWOHJqxTcY5C%8!_$QFu!Q|gAb@fP>+PwA?v1?)o
zU6IT~?V*Up(n@To)_aP!my<{H%hh&!`Q3*5o}Zk>7U!4RdvS5qYxqH})ofp$Li@kt
z(ZbWofi10ity<OdFC)`y6uz3Sq#+lbY7nT#?M~n>I<5Ai^KKQ`8D5Wa+uok@)_2z4
zSQ}XKCFiVvWRZjjUgTGi;YBX=7Kx?m^VoeUI5p-qX?|*^OSgFGhqV4f+N?tZN!g4=
zL&k+{hOub1V~b~)Y|I2&^|wgT;?*<~+G3wJ+!o?L;WY2W7A=2iJ7{`<cT(lbE#>+h
zFYv>e8`YqCyXw2nno=!w(Rp+_tGV9V*#S=)tsUo;YQuA7xv28!Jhp2c<r8n*_uU$H
zFwWQAptfE0yx6LFE#FnNjM!@K`MX|Rs3rYCz~Vt-i#b}(#X{azr_r=BkxZ2^<*TPi
zxWF}35f`(K@MFVOYGmc$EK${`Gw>IYXu{S_J+BMBsL$!9$m>%mVN3p9vhv7Hi8-#x
z>kGPi4(-E<Wxx8ayT$#)=B?K^HnCT^rW<Ux<YTCR9_JP$geOum-Er)c69=Gqq^oBm
z;lCId(vW6DzpqQHE;h8lgt{;yW8Z?RFvA~5=DrOo>!}Jb_j3oD3Ro%^>7Qsa|G?-;
z6V<tWA!|>H<k_ypwZ%w}EI9$FS+d0G<h)ilNww^Lh!OLwK+OFDzm4RLk)Wk%gjA6f
zKi2maQZ;e`QWM8W89^zs@9R9bnL5<aF^U9pF3+y3XRz1mStPNAV{EDLxmW4r99AXO
z9ogrk?^KoRkjjRtmWLl>qaUrL<b7e7rL1+vvNS9WbiWYJEI3t9xmCI6xbK4#e)wV0
z8Tj2?-&lKN)4936`TDR*bIvm`XqMyEMtP{8?_GWE&9x2Z{8@j|Id`=aY(Kxb*LKgL
zaPbnQS8Fx59h~b6g+CaQrzwq_OQMecx4BSXgY%&|B~O2NYNMW{qd7^*DLS8=-@z<>
zfAjDk*!uFMBBc`N$vBd&j1A-z5snoCb6CLvK@-*ltsNIiqSb6R0`(=TF08#zi-szJ
z{cU;P?P~3v*zf}dC16UZpguO#0(DDTAvTHlvF?r%zSw6gp~-&<i3XY%^&-+4&_6GP
zAkv>UY{UHAv_XI4<mWcipA^6hzR_P@fMhtg+-YMHsRG!dgRW7Ry`P0lX7B%sLZIDE
zt$VkZC&GjJ%87J;Wh~)EB$)6<SOKM&@R3#*Z1t%Ost=X(17$%f0XDoxV380R;}m3(
z={G_2V=thv_a{)-ga>c|BNmU5GlGf8OsQKMpssljCK<i}-s}Sqbtl&=rIsg|P3zd4
zN@>S^FDt1sb|frcYX#d5S~)~yd{0a!b9<Q0ifm+f;mun&u5PZ4Fl}RPz`M9~)*t0H
zs*Xq|y!axLFZajnz(_Hxoi8A$$f|4}{uZfv9?8Q}!Uq%1V^b|t^%yRw7w7}QUwxgD
zZ&30glCo8q#6~6NhQJn2V!!&uJ_FRtB$N3<Z0O_JBVb)eE1wLRCQ5p#M*-Ns8U80w
z@7X+n{t{Y-vpvvf)^!N;w4e<0e?#Fo%%}AR8N4)aB5!~TS6~3IL;{cD-vU<QuQFD1
znGuBF%bc*n%aH{R5atE^-PB~^Yl3?#GhA%Ij=}w3GLvPdxIZdq0rx$VHHiCB-#5km
zM7BFO<%p6@aDVEm=Q;I;>&bB_Zx3nqKKvMZ4BVjxgvD$?V4Yl3ezEU|+)(SpGi}Jh
z`UI-#n>a9rs=A0=IaeuV-EK9GEF{yoWAQeV;w|f;jxK#7F~dzK$N^}ibpbisEdI+(
z_3QxTE~9n$<z?x5Zl-79=ljd6ycNWP%R^o@8JrA%zea&$ECdefSBPXN#uDKz=r=fB
zKuZ!kQArGy2uTBR6*Q<wW2iKi3ar4E(1V%lg9z$wVegkfk^v36g0T_}`WU&?=`rph
z7=`A<n>D8e&1tWPOE(ZbLD3C`O2>y5;qxQy`<iN8Br?AH<9(t>CEo8PPJK0xjeR&V
zV#Eg&7g;`KQ}Sg>zCwvZ2`RI(nON;Ue9qFRQFV3X%zubhJ_+?5^(i>yWUuKz1*bj9
z!9Bl<R^gc;+$^smz`w`~0G1zvn$IAcq2}iqYOXyNH5{cMgA?NjPWHbLPExsJa6%!l
zwH}@uId@**AWj<6q1bbL!@(0z8>(+({d~ge3UXz$lJ9NWfQ1=%WTn9)`x#_?2g&eh
zjXA4pXcNvX%TC*C)G~K!$f{8In6VlW#*kHsFb*_3ZcEron3<IT>)A?(@E15cTUr^b
z*)O6{%9ku@M;gMVTpBLr6Q4*HsP=*AnzD#6iF$zVlj#gt6#qxNpCMo>zO3Qqg<H!~
zWTB_Y2UgeIRTLiK2FKvr8yh_&;gjAApCU7|<;<tJXBh~f&Hx)Z)*(mQO93mCOTDkz
z0q-k!FUL9r@67v}O9Ll%vrfL+kC+;M79k}*)%7$&$~5)=akUZVk`Wd{XTjNN1x~%y
zfkW3)&UV#DMc+R8ji2HG!~FGDd(Uar9W{%?RbL|z2<QAGy*#AP1?owW@GS{>?R-me
zX51}_G(I)b`w^4xN0OfBAXGL+jWBDQ<L*O#0}(ZYBz$HBmE*35%0jJ@0L_k#XF2in
z)VHYOSU2wseO;lX@9VLfmmgJ++%XM-YZB~gP~j^czMvUvd8bDv{Scx)`I2OK&0e6x
ziqq6jiz4niNQnwOCpbsJP!j5>HAt18jIFv?_1{r+8hlB^j;!jdd2;*WJVj)5DU@9I
zO!Ga?Qg)5Qwjj=LaiFxdr3xft0hfWx*C`xSv6HFD?6VG6q#Sq>1NMQ>jxMj_{A#l$
kJDz(Ph)QgO1HU3KD4r{xnbM18Jg4wHjq($C=BD)j0`b9Qm;e9(

diff --git a/app/views/__pycache__/index_views.cpython-39.pyc b/app/views/__pycache__/index_views.cpython-39.pyc
index c8990650f701029da1d96f886c00dd0619405734..a00ff15fd48295acf073258a2288405d9092ae2b 100644
GIT binary patch
literal 2511
zcmaJ@O>Z2>5$&F@ot^z4MN_gU81Ony9Iq0KK@!78AS9M)8L$yivPfSB2?pcs-sMm;
zJL~RVNn8wp0Q4aj0!FTe0n#_$eDY86p|3s(@GmeDAg_9tiev*>qHC(FYI?d~RlR23
z>m>}oZ$AHFa=*ja_cVF-7hv)ZhW-jdFu_Y!@sw9y>Q#Q~S3w$7VH$Gsd1X{ZY2<Xj
zY*ld@SM9W2C23N1(vGtSWjF0gE<)Km@zTDCMC&t_uF3w{x`@xYXp7`CcEZz3&eDOU
zD|*hdA^V5xqA%7aT&$mZ;*!{K_7}tpViRj@ieQfoFF(OP*)X*2cgwk)sbXsEnvzo?
zRc2&0D{~`lOUX~?QXAVk)b+F&AKA`mt`KFid^Q_$8w-S)qLRbF_9xP0qk1}(BU98<
zyGHYeSg}@FF&)>-fV?cTiK^!_Z8s@^zN4|++#F<OJ<+>1EU<~kBToBU{USUG;2jM8
z9Yn))EchNX?2w;%!V~_vcg&4{7Bu{vAA1cu3<aAr^)|G~_=hbKobqG5cNRAuBA98P
zB~J4jzhPI|abP-4aMnEssK;RwitqtbstLbfBKp$XW3aSf`4@SvF<4{Lu8<ae2|zJx
z!~ZSCIe$Xh6}F1*T*NqEm!jcYM)t@j7?RT8UHH@OJni1PcQ4!j;Lh#z?(S{tf4si~
ztRu4^7@yq4`4^!c<deEs?=xn3Rs7>4j_1K5tjKJ+ScC_p4SR~Pvk~$#E+*Co<TjWc
znT3rhZHsy;71m&sYUF$*tv@#-o8<bbyG3q)T0gQr6-m$3CNDEBv82$$$a=!0Ewjj`
zc_q`htVi&gg}R2<(m)jBv2Cq_zh>%XSbyBwM)hnzEaW4-?UJ22{l@HQxvLC2r%mZ!
zKrkNg!0+?KOL!k6;j!1{F+KTJjF&w13N6aFM-+YW3!%`?UCG>sV%Q1$n|I7mCR}hT
znN#oBgC4AOzwsLXMfM*1`zDIPYXT8&p&0OtZn96W8(*{<)^Lgv@o9*3wReB)-5QOg
z)^E^bW}eVjzveb9i>feBo%iJ-dcw8|Qf=~TW__G+k+`$pI51U-_USBfoolJI?Jg&)
zM(JHNiTjAXm@2m{UfrNZ((|gy)e$;yJ~di_qnHCm`Ot=;x=x1QkoYZ$Hz2I9>PIdm
zOEDl@d{9?%mQUpCnCUAJ45)W`7pQM|0r!@F|5m?)XAy1VKt?|YJ#{KoorC_LPz>mB
z1v2RufFltnjC!@<4)%M;K4AA(u=@nNL3fIlO9Mc^$r^OHXoKw7oWqllMI>8HO)orC
zPmryHl)Yv`(OsrY^iGNN`n&2??B~fAg!&bUUz4Ddsv$($sq#^l3!#ux8!gEzZ9OdW
zX;z4|pO;GJ;wY1k3vG1TbI)Qr$tYrxI4G9+^ld+P*~&ncs*u|Dm+5*sU(X-rMVWt6
z$`v0Dqh-?Qo>^wDP1+_2m%~8)f%HF;coV{gwD!?Y6BxQ}yo~@&J;;!^E{`DB@wb6~
zS>^CQ>MeK|o$a!&AIxVNj&6f{clY+eHLXgTgIYYFS7PL+Ec|;+R_u%1o_lBhIU|16
zubDvjA}II?F0V0|(*!1L&`2lX>tVEOefkh>Ua49wUc7T_XRtziQ0M{OIE9j;_#B@D
zB=kWWjB8anBrHy+ikYHDQ-sfut3Q!W#PUoPC;vOthw$haf_WR@l66o01^Uk_mLT52
z(7O;s7Id0JM-{j^ctiJ$f6h6omCh=HEvj9zhCi|Tum<N0k*H=u0H-EU6H&OE5nZ}?
zb?^3HZ}036cJ6+>yZ`$2;o#QZz;*86{rh+C43;bqI?Ljh|37v~66kO`Bba`!bggVl
zK9-}o0V9v486AM<Z8$1xO*eHwx3qc};m@$b^8l(F@a|#gbqK~I^gmd@jhH*{@UjiZ
zWv(A64-u|JUAC6FAp%fDz-d=}g8Sb{HOBSgHt7<lT%9|bx{NRzXYK~cGS#J5iPLR}
ze-!W{F^wx$mpS+GXY%bfKA`aUW>t%MDgR8Bs;@%4gwnqn#a`ma*KlR5VO+vh68{&l
CGiYT1

literal 5561
zcmds5O>7&-6`t8YE`LPRj^aeF+b)X47E?uXgC;Fp)s1S&i4vJ|^<%>XQg+Q*Nh^_D
zdUj}AEL9XxTA&3CC~Z$o0!YX7+*9vGd+0HzJ@k;C4D{BUk*59LEJc%Y3KThp#Jrh#
z^X6yYy!qan@yEt;48K<=|GD{>bBz6iD#JeumDiEtKY$1(c!M>0l{by5(KM@O)2doc
zyJ~Z4Ga61aQ_bkI*>Ia~)zxLIk*#LYZZ&e%T)>4L<oAtgK{(a1W3I>u_gz*kimb>X
zKNS=XOCo>7ML~?c%l3KowB{7SIVDP(b0#Qkm&9ptW|NC&9vWg?JgfQ72y2y<&pyI>
zS=mmqKWub@whUV;IVFRZ2xLtK&340AL6VWd-A)jzB(ohyt#D&E$=5p)QmW>++hv|O
zn}Mo{J1DsV9aPv1Dv2Fpln31xwv=kemuF`Db~xSi>y0Sd>9nWOapvADGhoCsKi#Wy
zT1NlpASZoZMT$QL>9N=qe3dD-%?}M>D0AC7GWK|nZQFu%n0!r{hmJ6h_@2=-4l_N5
z5_%oFJx(Q+J<REn*)x0WdA4V%e9t;896@7ycFz{p4wLPk{XP@+hsG)c#{uVnTFx<W
zGgLZDCHq5Y4K)|-e<V5Go~6=R?3}LUj%9Q$Pts^hB@5Ih7&Jdt>6)z>KQY#--BWYT
zK!$aHW-XFYOGS@n@zq^B_WaE#EEO3`cr*O@k2vzJuH7Vd!bR8KqEdNGlExCJ9<?^Y
z&BVlJBvyM@brZ9r>WQPeVQV8wT-ugy)C#I@BdYt2up1;fKR)J4mj*Fg(f!0ED;QIe
z@*A}{z_21NJBcAwzh_N#tJye^_sB@P@+>-5EfH>PB$>YWM@)VN+{Y8xb?kE(+>d9p
zIn;D{y1kn&r-t<xAQ*oGgmH^oM#;=^{55rr0(Vh!`SVEU4f$0_jo1pEN=n*RZo-PN
z>o|SFI5Lo%I_F1p>a1TF6KszwW1o?gY?}gm_K@$vCJrs^FyG)u24|?*N3f8dCAWH(
za3`3^?wE2*z=Hbq{0HVL>;Aoapq##~*~;A}8^9@iXzV#XXFDf~JBIwY=N#rSTBesd
z%;H35VYRNFuY}Ru4XhF~8f1w;fYZe5WyF~etXu3Btz?Y&uotw5XK2*-*@p)5q8L9Z
zbBncJx0pJ0z;`cmwwL9sdx83?QZKvD#j_unx0u6jLlb-1pJhiz*PKi2($Ji(-0|#}
zQfob1dCV^->@k1&5gFUsM?A@iu&%<W<;&gfmDPo%g{y1cJs?LUYc0PSc-K~zuX{M(
zwLY`%*S7-i)|(3}3!2@Q!AAJN`@Z*LT+I)4>=xHsJ21nRcT<m+*xFpnX5z$AN7jSH
zNxLRa+Ut>t6#;uPWXe%TJ^Cx^)l5BVw*A&__fgI}@ms8{F08D1i<PzIrx!R$OHL=4
z8vdRsuYto->$C~sMER*fZ_X{PFRXf#FUC{&qA9Pkd~34&wAgaRn_s`Nw0L!HZNYnc
z;kLJaW1fmb3V=$|!6t{8<<a>eqbC?yM%4tymM!@rzF%G-auFmkrGLLWK6hi$lY#2U
zRv^4s`Kl9p!?KATNEu1_O>`-nLt{)4<1{$|cmrtP?zGzw&Ct*e{6HMZBojOc>K(WW
zcOy{sEr3jtUtV9VVba?A%2MKNM6&6t#O-^MSeB@JK3zwx9*H2a$hlO3V$Ei#5*v;p
z22%wORFYkIP!HN<Y>62wS<WRUc1eFCVCjyW(QA=G+-az421=-PWFz4+v9MWwss$cs
zNJ`0h>M)kNqP~4jf)#%kgmI5MykHi&Ym|7&v;aUw4MGLev7ApW+vO$4eQX%#Eca7~
zmjF!eXGKHKq3>fpQ>QVGf21W!8lV1#f?~iQwh1IcG6e7k$?7rrCwMd9mN0=y@JaA<
z))5Cf*oP+Y%LaCtn(Lh4TAG{bb1k3^@9}x|&iJ0A?4Cmiw$G7gXW88?Et?yX1rq)b
z+229dA^ZWN>Re?+9{$q;N*SW?(AGXolH*>J1mE2YeGs_1yk1$Ge5vfst$OvS(^4rE
zNM8T|>O0t4Vs>Xo#OD`R*A^>)kWCqN+5{k<(_gpgL3{@jj~IV{wDxodo{9QTd16`w
zab1Sma;CiYG@0-&75t9cqH{blf(9(CvK_%JA>g$~nwJ)?t$A-PFIGIr)P_d(goji8
zWMZ66F<8aO5GnZe*8#DMbM<-<$1hXXRu@NPmsjQ&R=gkH9$Kw8zp#4MTUxxnxaPe&
z5Ki3VuSra}(=V51R)X!I{zWy@&FPq9dP_AMWh=?25e?Z#oD|ZEwx}3T0Am2U`+6e=
zRjFq$yBh2?%E(KwboniiKGgY*hK@?)cc?*oqKurS@|#2!iCiP{1`!QZri|{N#3FYq
zY6fk8GgyLH{2B-|9Eyi@Ol0wbkvmQq7qQS8BiGMSGc0bT|4$|L?>aLCtnmmEQFuqL
zTO-j=aC%0O2xx@Z_<+kB8i#;Hz#&9Iz#+udh)yhFzspbu8qHJO3?x9CMx*prGSp`4
zwyee(-Gd@7;LNWnHWIlBhKMUK3W(7xF{X2yq9oOCMZ8j+V2~`%GL=Dos*ho%S=K`=
zeviqI1!3B0)a_nI%bo$gNs5w)E2uX($`#`%VMfI6&-OBipR9d+&0VQicy?%oDQdn1
z)cikIalr46V}xuUA9b#B;yJ>`o++MxNO!A=N*@@1(8s2yF>Zj2Pms+U9Q*+ijzqi$
z_K<Ezt4Q%U$R-f_odTi0U=!>;<1Wq3lkA|owzZFp#F)M$-$sX%wwIf2gt4M<>B_Ir
z{4XTdozNCEJ*#7{_zDWgGTnm#^mzF7zfBGhZ_3-89?U%=dJM1{!96+BHiE8nMD-Bf
zCPC|yv4NSJgNX+HpVAN6xz^7#3L)v|!m)ln?{)yqSrhEHspjm&J@z2-Yv?Y&PQ)W}
z9i(i?m#Iu6%L);?=%nO4N=a^(;$p4M_fU^%uN=ep&(j(m$oY5+`0_ZjF96xEJn?37
zh17XM@fV3VPh<h4TJ#$-@WpN|cmSh}t7AG3Tbs3e4Zn4*Lp$=x?+?97q`VEp8o~=(
z<g~TjUG_RQ+PzPH`5W)crT8xpMGPsvn@dl;c9v#ROkH6Ok32FA;-r}R!a=>{-}A$U
zf2R@D^hu4&`IBDqE!warhh>hcbb(K7{mwMxG2PT-u93t#k()%wS>i#9_L%mTPGzm>
zw>5?(xfb0h=n+GlJb||UkUjK{$p;S{DI976&kASEob4FSXO5G)(DQtpmke^MMNQ9{
zDSw=gQ~lVv{#)M0Sl#?g|JHyDNMhYsUR|S`XERV+kr;KjIMW)awZnY{mHzWp`ZxhM
zN>5br1!dux!U{Q@p1py`CuJdQhlAb6gIC$9$nT+Nia~S{>ppjV?yBbtfy++pg)y#l
zcRQgBM0kMt%8n$sNi4c<rB^H{0|Brklh+rNGEYZ5iCRy->dz33DOzC08AKl?L;e`$
z@_1rz;0C-S$pPs=N6(dxOn|H3{`@;Wwux>$`aMa0n@Xp3YfV23)M_$IJW@y+IFVf>
zHlltN=;%f3S<gANv3j{0U)|YeBsz`Y3h6f{)_GpQzk~?MGF`(x@4kRHqf1C{6#0Jv
DYmRvH

diff --git a/app/views/__pycache__/user_views.cpython-39.pyc b/app/views/__pycache__/user_views.cpython-39.pyc
index c46cdfe7f8b27c06d6e976169aa776bd97938881..0ce664ae48b96dca7625b555940109f5d261fca9 100644
GIT binary patch
literal 1827
zcmZ`(IgcAR6y`CPM%Uhl?HoP=XHu;CAP9oE3?K(^s%Zujk-IB<xKc=Jod}ysY4<<a
zNaZsBB^8k_Re=10t@0i<JC;_?0DMD!!y&)#U1hhM5_tan<KMI2Lqh(>#p(kX`38ph
z3ydIwRz%U9DwZ?FbFP9sP+=ZY{Kl$C#d)lfJW;K@rP4fA?Yylzc}I2gE+vu*E_)&n
z;Wf|uvj1jFL~p5xMe-Y2(0p6=Uv7z(NYAKfUo+7WU61d0yw~7;vE}hyk8d~lj@b41
zp2znZd|w=ReBa}T4Spn!J$@kWy&&2Be?TG0Lf87Xn#rjiUs%`I@<K>mSgEE}X{C#`
z{AnhQb%~Z@tmVkMc&4l3bfUA^b<d<N%Bm`6Mrz}Fx63m<nN5vLN+J9ww=<gxIIa-V
zjP!VF$CC@!uCdFigoTimgbjEQvN+Y!oEMkCW&#HX2+zX-zB1}kWH5zI<DYNnV1zPm
z9|jW);WHTK9vDj&<X2)TSZbM|SLBKccFn;7d^qpniA6Ow_T=2E>K$_-BF05a2^rTh
z9HJ969L+YEcSP^O>*i=sPN##*v3zYjwZczNroXsWb1wdFA~1wSG@|+dX7gYGo^iqV
z&tLoia$+Uz`9zpCA$VB;!wdNmCYHRUf*zw7n7v_w3I3LWD8vK6ndK<%iY+)LHn5=x
z7j!{EXf$+fRgMa{6x?di+3&+ZT;jDBV{zl%anf+lB8?PW0MS;CLv(cu)*2nGQB%ep
zhl5?<4}5?yI%aA1Vdgm8*@KDkRmW1=qbcoB{Rpu6?qD-5)|`ORY@Bcci~n_km%d=N
z@SqkR4)rnor7;ooeKa3|sb%Sp5%>fRl3P*5^rr|sL~}>a(I(>plHJNf*laLONG(!7
zhWWg6D-pANLmP)J&tRA@z^rQ%3_=PSiy`&8xD5oabp^F9?{P0F^pRRhYQtfhYCaU5
z?UfQ-%0PECGE#_@egeom9xUr~O#y{3jRJJ$iUQ!hpb!mY&1%-XX1zhU1OKiNrc3wV
z@qDyo@D%pe^_0?t>d#<3-x}QM7;8LX2f<A8p2lRvo&XIT`oI{=gAZL~Y-wl4vFG1q
zRCi&|O5i;apUuz>ePhB@G?<uJ)cSLH53@rTo>rxKrSYm|ufQGeb-9lCv4AEk^=Ubh
zD}BY+lutn)Iqwam;F6-aD3vS<jjUbh6U}!JUq3#>e0;nYJdY33PQFqTF{|X)7%_v1
U@PIyHJ)Y1sf_h9~#Pxvnf8A1s0{{R3

literal 7531
zcmcIpO>Er873Pp!F85b!*^z(pQzo?|Z7NGnkS2v{8<FKTszjCqOR}3q(*?alNh|H2
zhg{oYSH36(ilRo{TnaP^usY_Po_Z{L=&@%W)02T*iuTYNZP4!x_lGOVb&I4Db~y9+
z=7+<1-}~O9oyjB>{C%GLa^uHm73I&=i2mtlyn~<n1q!ZkR#j@O$ZBd)t!YKArWf^E
ztQe~qMWYrk#u@3TRkM~TCS+Z!CW|S^v}(GTme))%Bd^(F)?r+CM)uTV&dGI-@z_4&
z29JNJ?6KmgliNDRO`h0bJo!-NDV~<{<5DvN%`6|0k`q!h*VjD8N2UBZDL>wqpWx3)
z`IwZC_2nn|DJeh6wG}0Q`Z1nU$;X4lm1@grib~xJMub!6jwpFfty#4_Cx{E@PRnt<
zz!VOz2&e1?@s_BT)*B*-Z@G<nWql`ztygV#GtUBJ!|_V|_F|y7Tu1oHX}XlE71t}%
zT)n>-D)cVq@N<8M!c+E?U8Rj3Z7E`uvlZ007+1OWknJ*mvCTRv*Y_DyP}BC6T~$i3
zi`aR&kD>f3_H$Q5UEf!rtAtlC#?7|c)_CHfc1u}Nbj35a;#=m<Z<(^IGsU0u5<J<~
zKUO|f_rf`b`rlIC$I5o~2Rcu!bZZxs3#efi(~Eia$(gIRXWzD6$0|4Kb!<|lQMcCZ
zO4Z?y|Hc$$^)nVEc}2=?v19)QvZNLHTPZ9Q=2nM9bXQE#2G;GGW6iEuHM?B0ITw!W
zP99d}Q`~XOqSBO;Lp{<wtlrv~+7OLavp4qLs$DNt_+iD`-SX639Eyf0^>t-)Xa(19
zEM2#R&C8okdD{|0_ZAA*R;_oJ<`+qUo<~k>wKl9Jhz3u138H@M=_8aP&t(aIXb{1l
zH3;ov_mRprR&3!JX_&R;<-(1L8-?YC*||dhI#}VPH9j+rVmy!Hd|1m{3-j+4thuGd
zx!KhT+AJEqDV+7neQ2E<&-b6i|91G6t-;3kwoOXp-j#7O`hO~FWGgH9xu;NU;7osz
z+hrVfz?IWVh5bssqvI5^AkiQ7GbOJE>ePim6ODT!hi<ZXa%$RcHmC1aoO^C)m$Ew5
z+zFBwrHM9b&CB0{`d{%={1^MSJ9V+zDBD%{GAd-sq~~V`w>Q076;lE#+*Z|dfdX{0
zTtC;h3P*^Bn6dJzpB<KoG^WZYMFN+=D7S=5xZ>P*$}ND8x$b!7O}knRV&!TBCr2Z-
zSZ&9>Qw<VbQ$vSXfyNJF62tPbK;^duZI>9M;v{uq&R{3RagrqZ4-iMweFcT08q8$6
znr5n+Oqp7ejjARjIdzm}aW$DBH9tMwYI2}siG~RD<)xKXyn%Sl@irUW9fCR<yAO3U
zc)1<{8#@iSlQk7JCTkjMD%C=$+toY`ps2U?M@+oc)(OgXWB!-^BOYt(rC3`Nzi4Z1
zWt*<Cj=>GI&|cT}RX`s};%KuWi3y3?lhiG#m5@4WzgJRfgl)YOCm`i1Ib*D2QtKA}
zu^w6HX$hx^M{MUMfT;m6eG~VRhkJRcwz0=<DMkpU#sgz8iUd_i2vi5sIv_cm1yGy8
zA<r%bsR#xJsR$AT@h*Y|BX#FqDWZ1G|7G6<BZv!YzdE~G=!4dgIxB@$i{7zBzDw3Q
zchb6R!&zEXKeETI9~5pBhWi}S^FKKxqJ<3>6ot4WRgYL#WG}wv>VAFXl!MjLhDZxP
zQtybR^^xgoF6`lv6Al*kUv1krw@*KN#&Vv$Pv6kStOjwnRW5@TM2N`TfQVd^L?oXU
z#Bc*0)U6h1U}_R|B~S)QyX7?i?6ry~PLr0=Z9GqnMB#qfk-P#luu-kvw#(ar=6WI@
z7w4cLUZrB3iU}$#DkK2EOtroX3V}Bj0nbU?cb8EpYLd}^8W1c&m>Ga!LpT4a8-vn7
z-H;M0%}~=c|E{Y!fHU<wp_*T1)e}s-fie9v)7+^#U7()67(s>0Lynd<rjOEpL_-o%
z)@I@lAd`#;r+<^9T~ga>N8^N{Od=+=2z3W7z2EB5P_+}2bd-fx&+y_rw#Nt!C3>1$
ziLK<$?}48h@bj{lA}o)P(X{OSA4ch7s`dc19z+#aNl)XzOmp#?KYbPK5>VG;8&Ny4
zjsPrw;y{Ox)g7fdc|fy&=8qg#at6uHWK0kt2-1PiSmHJ8eLgcdnBqJH@<fU$s?l*2
zM2Un!#S2utNX1K35P1<7P~`RSTv{ZcgBWO_AcqcO<Zx_2$)#gV96-lGQgNKJ@}K;^
ziCT{XnCulM-h`%~m<An}B;e^j|L5@ekC^`>Pm$+{f)bUpeS|f#rlN+^1et~!{Iz?<
z)40xK-1r2+2#>F;bV@uu<N`84;!?xxY9vAp_)45IFocgdI77*RZ;vCWVcnA{eYfby
zo;Y8Fv1xRvn+6YH>pdP2=NYusNIQ$R)@|#Zg!J$u-I=7n@A-YqF~W1<9K;pm8Bc*B
z6uS)J3N+=J=1=Rddl_O2(I<@ZhGD)?e-!~8jsGD7J7J1^#$$uN)N`d5u8l4pK&)&2
z$?LOo)@&G8Sryl!h!>GA&#NMjw@kdwb?ptO@(8a|q#%;4^~vj9I^QP<J^OmPxg1}E
z@3icyaBRL~IrqV)-6x0X$^7C<;l`>pzqq>8=O@-gZ=OlZ_B>I!4Td~vHJV*YGKe#J
zB<JSr!dhX)njqFPK38>Y;W_uc^UJpD-fIX>@ypC5l;_;xzW$v<j_tsLh5#h8u840P
z9+H+6UCzNNpH!bU<p5YB^Y#7b|2EsIe=>XzoIBj=y3X}hwYuYH*6Q2!#=W{FBbIzN
zbeSflH7MC3$X^NK^hZHdH(qJfod{S>lQLnFcpU|@Ejl6x`@kW5hQ~B}F!KOIxC<y0
zl`u-WOw>-uxCO3{P)nsqWlS|R<6n9#T80kNL`>6jmL_`xxF#-QJU=I~Y+W>JCE;u#
zg)szaLm8W^-7uyLWHOLJouCY$CM<y1TQEYv*d9U=Pe=Ymx;wy_0T?3}im+l=^8>#P
zSErT`mUI#bS9)$#qX0tO_25`PR=D}8$`dqF{avY-Yy(8QKt%mgk$wrD#@!x_sht$T
zRCgQz8l0-evozK%rG5plkp^ra10=IR6IfR!)aN5!wyp1xKJreXelG`9PlmamFj(Qa
z?)pclCq|Ih`l+Mk7lw8te{3-@dsZz*=q<c(z2dr+`i4cA)Xnu+4H2dcf|xv&eyV~T
z-Tf)ovpx5kc#Hat8~~L-uhhZw-llv1e{)7gWXOKS_vDG92Y`Wjjd1yvgi}A>_4TXy
zoU|_S9Vmx}Wm0Y6-6<&$(#Qb|m?4>@0>g$SnL$1#F42A3%4e9=2$@vmw118+?iCaY
zXlELh6jD)S1DK(aMUD0?O7Gj1$xcaInw0jJ{E7%@QWfuD6xb7TK*)$}c2iBmX#rXx
zd6GH&++Rq03NxUT9N;QtJv~V+k@ZwNpaVn`qy%AoU!r+2DMRjfA7lZ^0!{poCt(qi
zK2}&=t$-4M!Wul?&7P9w8EwP;2vQlsgM7#<a-fW7DA)XnwucNX&+NwA##QBmKkb@r
zljo40NVF53BtIrskmRHC3JXJy`}j{Ok&*O^UV1A7E6BDJ`>Y+~$V5NXc2n)t)(9Wl
zR*}khsh#TNu!eLy-N|rdr1#ZbSSD6@x}9uix^}H}j!Aop^D}QNyKz|S46JpuOCqwM
z$(DDVKi^IOA6{r@VW+TGvTA9i*#}u^rMQxndM7&1@iT4xd4=}i&To!-@^&0g-+l7@
zi;JrwgEvzgSz4Pf%`S((wHpim*-g)Dx--*ArBx`?S8X)5Tg@q%SbJj{0(bf+yHD6F
z!#&?CydNmV(cWM;kas98%wL~heM}j?AT!%S;z(3{n^L!a{0dw((S$V4Mc=NvWMhzx
z?B5xt9fREKAn!_X&v3%?8%lRRJ=qxs3$>xt@%)OlxVErhE#0t&Z(Op*dw%z(%q@@i
zA5LzQ^<CK(*bn7eUhC4bFpT6uLO3<MQU_{E>wm&#0(Sl}#Rrcy6qK3V1mALm8^paz
z&1tl}#}wlQamr-c^&LM^Z+O;vqgChrKl(EhXX*V#`Ol%voFGXr;~PnpPg?jY;+49~
z97f3Az{8|y(pp@)HIYAB6$$FAYs(As$TJr#oTy&DC^94RE8&0>5h0S*(RDyaPIBlu
zAJgvoNr}$b3}N{yGPYv_q7$eM%IzYYuHOw}i2f_hK*L9)Fg!bh-eGt~^oWwd_<&S)
zf>^8BM3NMrkK}hGS0a62P!huSf)qKimRl+}xD)7-VhzBZ!nr`FSBB}Tj?>JK3{X9Y
z!vstC6jhX!Z3myBsujv#yeH>(u&|2biUPG_)Y=I&ys5wlUsb?__&(h;!o3nNqj4}o
z#OJUf4F3W;?mH+bN=zdwJj!z5TFJO6`50x2iI<toQdKs_(x@S!K`DzEYS4X6%~3{K
z6&z#aPlaF3wgtg}Om2rBao_?a)g-qVm_!@t6O())!H7(PPxW))VJJ+Q6j7w&rtDLa
z-)u@HLCK9EhP1rr$P~6rkH{cavOnpv<eDNokfU*q%W*E&8oX6?F4GZlDbzlTr?J!|
U`N^|cmYl(L4A(dDo653(1Ht(htpET3

diff --git a/app/views/group_views.py b/app/views/group_views.py
index db016d3..8fbfcf2 100644
--- a/app/views/group_views.py
+++ b/app/views/group_views.py
@@ -1,201 +1,33 @@
-from flask import Blueprint, render_template, request, redirect, url_for, jsonify
-from database import get_db
-import mysql.connector
+from flask import Blueprint, render_template, request, redirect, url_for
+from db_interface import get_all_groups, add_group, update_group_description, delete_group
 
-group = Blueprint('group', __name__)
+group = Blueprint('group', __name__, url_prefix='/group')
 
-@group.route('/groups')
-def groups():
-    db = get_db()
-    if db:
-        cursor = db.cursor()
-        try:
-            cursor.execute("SELECT DISTINCT groupname FROM radgroupcheck")
-            group_names = [row[0] for row in cursor.fetchall()]
-            grouped_results = {}
 
-            for groupname in group_names:
-                cursor.execute("SELECT id, attribute, op, value FROM radgroupreply WHERE groupname = %s", (groupname,))
-                attributes = cursor.fetchall()
-                grouped_results[groupname] = [
-                    {'id': row[0], 'attribute': row[1], 'op': row[2], 'value': row[3]}
-                    for row in attributes
-                ]
+@group.route('/')
+def group_list():
+    groups = get_all_groups()
+    return render_template('group_list.html', groups=groups)
 
-            cursor.close()
-            db.close()
-            return render_template('group_list.html', grouped_results=grouped_results)
 
-        except mysql.connector.Error as err:
-            print(f"Database Error: {err}")
-            cursor.close()
-            db.close()
-            return render_template('group_list.html', grouped_results={})
-    return "Database Connection Failed"
+@group.route('/add', methods=['POST'])
+def add_group_route():
+    vlan_id = request.form['vlan_id']
+    desc = request.form.get('description', '')
+    add_group(vlan_id, desc)
+    return redirect(url_for('group.group_list'))
 
-@group.route('/save_group', methods=['POST'])
-def save_group():
-    data = request.get_json()
-    groupname = data.get('groupname')
-    attributes = data.get('attributes')
 
-    if not groupname or not attributes:
-        return jsonify({'error': 'Group name and attributes are required'}), 400
+@group.route('/update_description', methods=['POST'])
+def update_description_route():
+    group_id = request.form['group_id']
+    desc = request.form.get('description', '')
+    update_group_description(group_id, desc)
+    return redirect(url_for('group.group_list'))
 
-    db = get_db()
-    cursor = db.cursor()
 
-    try:
-        # Prevent duplicates
-        cursor.execute("SELECT 1 FROM radgroupcheck WHERE groupname = %s", (groupname,))
-        if cursor.fetchone():
-            return jsonify({'error': f'Group name "{groupname}" already exists'}), 400
-
-        # Insert baseline group rule
-        cursor.execute("""
-            INSERT INTO radgroupcheck (groupname, attribute, op, value)
-            VALUES (%s, 'Auth-Type', ':=', 'Accept')
-        """, (groupname,))
-
-        # Insert attributes
-        for attr in attributes:
-            cursor.execute("""
-                INSERT INTO radgroupreply (groupname, attribute, op, value)
-                VALUES (%s, %s, %s, %s)
-            """, (groupname, attr['attribute'], attr['op'], attr['value']))
-
-        db.commit()
-        cursor.close()
-        db.close()
-        return jsonify({'success': True})
-
-    except Exception as e:
-        db.rollback()
-        cursor.close()
-        db.close()
-        return jsonify({'error': str(e)}), 500
-
-@group.route('/update_group_name', methods=['POST'])
-def update_group_name():
-    old_groupname = request.form.get('oldGroupName')
-    new_groupname = request.form.get('newGroupName')
-
-    if not old_groupname or not new_groupname:
-        return jsonify({'error': 'Both old and new group names are required'}), 400
-
-    db = get_db()
-    cursor = db.cursor()
-    try:
-        cursor.execute("UPDATE radgroupcheck SET groupname=%s WHERE groupname=%s", (new_groupname, old_groupname))
-        cursor.execute("UPDATE radgroupreply SET groupname=%s WHERE groupname=%s", (new_groupname, old_groupname))
-        cursor.execute("UPDATE radusergroup SET groupname=%s WHERE groupname=%s", (new_groupname, old_groupname))
-        db.commit()
-        cursor.close()
-        db.close()
-        return jsonify({'success': True}), 200
-    except Exception as e:
-        db.rollback()
-        cursor.close()
-        db.close()
-        return jsonify({'error': str(e)}), 500
-
-@group.route('/update_attribute', methods=['POST'])
-def update_attribute():
-    attribute_id = request.form.get('attributeId')
-    attribute = request.form.get('attribute')
-    op = request.form.get('op')
-    value = request.form.get('value')
-
-    if not attribute_id or not attribute or not op or not value:
-        return jsonify({'error': 'All fields are required'}), 400
-
-    db = get_db()
-    cursor = db.cursor()
-    try:
-        cursor.execute("""
-            UPDATE radgroupreply
-            SET attribute=%s, op=%s, value=%s
-            WHERE id=%s
-        """, (attribute, op, value, attribute_id))
-        db.commit()
-        cursor.close()
-        db.close()
-        return jsonify({'success': True}), 200
-    except Exception as e:
-        db.rollback()
-        cursor.close()
-        db.close()
-        return jsonify({'error': str(e)}), 500
-
-@group.route('/delete_group_rows/<groupname>')
-def delete_group_rows(groupname):
-    db = get_db()
-    if db:
-        cursor = db.cursor()
-        try:
-            cursor.execute("DELETE FROM radgroupreply WHERE groupname = %s", (groupname,))
-            cursor.execute("DELETE FROM radusergroup WHERE groupname = %s", (groupname,))
-            cursor.execute("DELETE FROM radgroupcheck WHERE groupname = %s", (groupname,))
-            db.commit()
-            cursor.close()
-            db.close()
-            return redirect(url_for('group.groups'))
-        except mysql.connector.Error as err:
-            db.rollback()
-            cursor.close()
-            db.close()
-            return redirect(url_for('group.groups'))
-    return "Database Connection Failed"
-
-@group.route('/delete_group/<int:group_id>')
-def delete_group(group_id):
-    db = get_db()
-    if db:
-        cursor = db.cursor()
-        try:
-            cursor.execute("DELETE FROM radgroupreply WHERE id = %s", (group_id,))
-            cursor.execute("DELETE FROM radgroupcheck WHERE id = %s", (group_id,))
-            db.commit()
-            cursor.close()
-            db.close()
-            return redirect(url_for('group.groups'))
-        except mysql.connector.Error as err:
-            db.rollback()
-            cursor.close()
-            db.close()
-            return redirect(url_for('group.groups'))
-    return "Database Connection Failed"
-
-@group.route('/duplicate_group', methods=['POST'])
-def duplicate_group():
-    groupname = request.form.get('groupname')
-    if not groupname:
-        return jsonify({'error': 'Group name is required'}), 400
-
-    db = get_db()
-    cursor = db.cursor()
-
-    try:
-        cursor.execute("SELECT attribute, op, value FROM radgroupreply WHERE groupname = %s", (groupname,))
-        attributes = cursor.fetchall()
-        if not attributes:
-            return jsonify({'error': f'Group "{groupname}" not found or has no attributes'}), 404
-
-        new_groupname = f"Copy of {groupname}"
-        count = 1
-        while True:
-            cursor.execute("SELECT 1 FROM radgroupcheck WHERE groupname = %s", (new_groupname,))
-            if not cursor.fetchone():
-                break
-            count += 1
-            new_groupname = f"Copy of {groupname} ({count})"
-
-        attr_list = [{'attribute': row[0], 'op': row[1], 'value': row[2]} for row in attributes]
-        cursor.close()
-        db.close()
-        return jsonify({'new_groupname': new_groupname, 'attributes': attr_list})
-
-    except Exception as e:
-        cursor.close()
-        db.close()
-        return jsonify({'error': str(e)}), 500
+@group.route('/delete', methods=['POST'])
+def delete_group_route():
+    group_id = request.form['group_id']
+    delete_group(group_id)
+    return redirect(url_for('group.group_list'))
diff --git a/app/views/index_views.py b/app/views/index_views.py
index 8ef3541..2d1b799 100644
--- a/app/views/index_views.py
+++ b/app/views/index_views.py
@@ -1,26 +1,27 @@
 from flask import Blueprint, render_template, request, jsonify, current_app
-from database import get_db
 from datetime import datetime
-import requests, pytz
+from db_interface import (
+    get_connection,
+    get_vendor_info,
+    get_all_groups,
+    get_latest_auth_logs,
+)
+import pytz
 
 index = Blueprint('index', __name__)
-OUI_API_URL = 'https://api.maclookup.app/v2/macs/{}'
 
 
-import pytz  # make sure it's imported if not already
-
 def time_ago(dt):
     if not dt:
         return "n/a"
 
-    local_tz = current_app.config.get('TZ', pytz.utc)
+    # Use configured timezone
+    tz_name = current_app.config.get('APP_TIMEZONE', 'UTC')
+    local_tz = pytz.timezone(tz_name)
 
-    # If the DB datetime is naive, assume it's already in local server time
     if dt.tzinfo is None:
-        server_tz = pytz.timezone('America/Toronto')  # Or your DB server's real timezone
-        dt = server_tz.localize(dt)
+        dt = dt.replace(tzinfo=pytz.utc)
 
-    # Convert to the app's configured timezone (from .env)
     dt = dt.astimezone(local_tz)
     now = datetime.now(local_tz)
     diff = now - dt
@@ -29,91 +30,21 @@ def time_ago(dt):
     if seconds < 60:
         return f"{seconds}s ago"
     elif seconds < 3600:
-        return f"{seconds//60}m{seconds%60}s ago"
+        return f"{seconds // 60}m{seconds % 60}s ago"
     elif seconds < 86400:
-        return f"{seconds//3600}h{(seconds%3600)//60}m ago"
+        return f"{seconds // 3600}h{(seconds % 3600) // 60}m ago"
     else:
-        return f"{seconds//86400}d{(seconds%86400)//3600}h ago"
-
-
-
-def lookup_vendor(mac):
-    prefix = mac.replace(":", "").replace("-", "").upper()[:6]
-    db = get_db()
-    cursor = db.cursor(dictionary=True)
-
-    # Try local DB first
-    cursor.execute("SELECT vendor_name FROM mac_vendor_cache WHERE mac_prefix = %s", (prefix,))
-    result = cursor.fetchone()
-
-    if result and result['vendor_name'] != "Unknown Vendor":
-        return {"source": "local", "prefix": prefix, "vendor": result['vendor_name']}
-
-    # Try API fallback
-    try:
-        api_url = OUI_API_URL.format(mac)
-        r = requests.get(api_url, timeout=3)
-        if r.status_code == 200:
-            data = r.json()
-            vendor = data.get("company", "Unknown Vendor")
-
-            # Save to DB
-            cursor.execute("""
-                INSERT INTO mac_vendor_cache (mac_prefix, vendor_name, last_updated)
-                VALUES (%s, %s, NOW())
-                ON DUPLICATE KEY UPDATE vendor_name = VALUES(vendor_name), last_updated = NOW()
-            """, (prefix, vendor))
-            db.commit()
-            return {"source": "api", "prefix": prefix, "vendor": vendor, "raw": data}
-        else:
-            return {"source": "api", "prefix": prefix, "error": f"API returned status {r.status_code}", "raw": r.text}
-    except Exception as e:
-        return {"source": "api", "prefix": prefix, "error": str(e)}
-    finally:
-        cursor.close()
+        return f"{seconds // 86400}d{(seconds % 86400) // 3600}h ago"
 
 
 @index.route('/')
 def homepage():
-    db = get_db()
-    latest_accept = []
-    latest_reject = []
-    total_users = 0
-    total_groups = 0
+    total_users, total_groups = get_summary_counts()
+    latest_accept = get_latest_auth_logs('Access-Accept', limit=5)
+    latest_reject = get_latest_auth_logs('Access-Reject', limit=5)
 
-    if db:
-        cursor = db.cursor(dictionary=True)
-
-        cursor.execute("SELECT COUNT(*) AS count FROM radcheck")
-        total_users = cursor.fetchone()['count']
-
-        cursor.execute("SELECT COUNT(DISTINCT groupname) AS count FROM radgroupcheck")
-        total_groups = cursor.fetchone()['count']
-
-        cursor.execute("""
-            SELECT p.username, d.description, p.reply, p.authdate
-            FROM radpostauth p
-            LEFT JOIN rad_description d ON p.username = d.username
-            WHERE p.reply = 'Access-Accept'
-            ORDER BY p.authdate DESC LIMIT 5
-        """)
-        latest_accept = cursor.fetchall()
-        for row in latest_accept:
-            row['ago'] = time_ago(row['authdate'])
-
-        cursor.execute("""
-            SELECT p.username, d.description, p.reply, p.authdate
-            FROM radpostauth p
-            LEFT JOIN rad_description d ON p.username = d.username
-            WHERE p.reply = 'Access-Reject'
-            ORDER BY p.authdate DESC LIMIT 5
-        """)
-        latest_reject = cursor.fetchall()
-        for row in latest_reject:
-            row['ago'] = time_ago(row['authdate'])
-
-        cursor.close()
-        db.close()
+    for row in latest_accept + latest_reject:
+        row['ago'] = time_ago(row['timestamp'])
 
     return render_template('index.html',
                            total_users=total_users,
@@ -124,66 +55,15 @@ def homepage():
 
 @index.route('/stats')
 def stats():
-    db = get_db()
-    accept_entries = []
-    reject_entries = []
-    available_groups = []
+    accept_entries = get_latest_auth_logs('Access-Accept', limit=25)
+    reject_entries = get_latest_auth_logs('Access-Reject', limit=25)
+    available_groups = get_all_groups()
 
-    if db:
-        cursor = db.cursor(dictionary=True)
-
-        # Fetch available VLANs
-        cursor.execute("SELECT DISTINCT groupname FROM radgroupcheck ORDER BY groupname")
-        available_groups = [row['groupname'] for row in cursor.fetchall()]
-
-        # Get existing users and map to group
-        cursor.execute("""
-            SELECT r.username, g.groupname
-            FROM radcheck r
-            LEFT JOIN radusergroup g ON r.username = g.username
-        """)
-        existing_user_map = {
-            row['username'].replace(":", "").replace("-", "").upper(): row['groupname']
-            for row in cursor.fetchall()
-        }
-
-        # Access-Reject entries
-        cursor.execute("""
-            SELECT p.username, d.description, p.reply, p.authdate
-            FROM radpostauth p
-            LEFT JOIN rad_description d ON p.username = d.username
-            WHERE p.reply = 'Access-Reject'
-            ORDER BY p.authdate DESC LIMIT 25
-        """)
-        reject_entries = cursor.fetchall()
-        for row in reject_entries:
-            normalized = row['username'].replace(":", "").replace("-", "").upper()
-            row['vendor'] = lookup_vendor(row['username'])['vendor']
-            row['ago'] = time_ago(row['authdate'])
-
-            if normalized in existing_user_map:
-                row['already_exists'] = True
-                row['existing_vlan'] = existing_user_map[normalized]
-            else:
-                row['already_exists'] = False
-                row['existing_vlan'] = None
-                print(f"⚠ Not found in radcheck: {row['username']} → {normalized}")
-
-        # Access-Accept entries
-        cursor.execute("""
-            SELECT p.username, d.description, p.reply, p.authdate
-            FROM radpostauth p
-            LEFT JOIN rad_description d ON p.username = d.username
-            WHERE p.reply = 'Access-Accept'
-            ORDER BY p.authdate DESC LIMIT 25
-        """)
-        accept_entries = cursor.fetchall()
-        for row in accept_entries:
-            row['vendor'] = lookup_vendor(row['username'])['vendor']
-            row['ago'] = time_ago(row['authdate'])
-
-        cursor.close()
-        db.close()
+    for entry in accept_entries + reject_entries:
+        entry['ago'] = time_ago(entry['timestamp'])
+        entry['vendor'] = get_vendor_info(entry['mac_address'])
+        entry['already_exists'] = entry.get('vlan_id') is not None
+        entry['existing_vlan'] = entry.get('vlan_id') if entry['already_exists'] else None
 
     return render_template('stats.html',
                            accept_entries=accept_entries,
@@ -191,13 +71,24 @@ def stats():
                            available_groups=available_groups)
 
 
-
-
-
 @index.route('/lookup_mac', methods=['POST'])
 def lookup_mac():
     mac = request.form.get('mac', '').strip()
     if not mac:
         return jsonify({"error": "MAC address is required"}), 400
 
-    return jsonify(lookup_vendor(mac))
+    return jsonify(get_vendor_info(mac))
+
+
+def get_summary_counts():
+    conn = get_connection()
+    cursor = conn.cursor(dictionary=True)
+
+    cursor.execute("SELECT COUNT(*) AS count FROM users")
+    total_users = cursor.fetchone()['count']
+
+    cursor.execute("SELECT COUNT(*) AS count FROM groups")
+    total_groups = cursor.fetchone()['count']
+
+    cursor.close()
+    return total_users, total_groups
diff --git a/app/views/user_views.py b/app/views/user_views.py
index a2f2bf7..3a14334 100644
--- a/app/views/user_views.py
+++ b/app/views/user_views.py
@@ -1,276 +1,49 @@
-from flask import Blueprint, render_template, request, redirect, url_for, jsonify, flash
-from database import get_db
-import mysql.connector, os, time, requests
+from flask import Blueprint, render_template, request, redirect, url_for
+from db_interface import get_all_users, get_all_groups, add_user, update_description, update_vlan, delete_user, refresh_vendors
 
-user = Blueprint('user', __name__)  # ✅ Blueprint name = "user"
+user = Blueprint('user', __name__, url_prefix='/user')
 
-@user.route('/user_list')
+
+@user.route('/')
 def user_list():
-    db = get_db()
-    if db is None:
-        return "Database connection failed", 500
-
-    cursor = db.cursor(dictionary=True)
-    try:
-        # Get user info
-        cursor.execute("""
-            SELECT
-                r.username AS mac_address,
-                rd.description AS description,
-                ug.groupname AS vlan_id,
-                mvc.vendor_name AS vendor
-            FROM radcheck r
-            LEFT JOIN radusergroup ug ON r.username = ug.username
-            LEFT JOIN rad_description rd ON r.username = rd.username
-            LEFT JOIN mac_vendor_cache mvc ON UPPER(REPLACE(REPLACE(r.username, ':', ''), '-', '')) LIKE CONCAT(mvc.mac_prefix, '%')
-        """)
-        results = cursor.fetchall()
-
-        # Get available groups
-        cursor.execute("SELECT groupname FROM radgroupcheck")
-        groups = [{'groupname': row['groupname']} for row in cursor.fetchall()]
-
-        cursor.close()
-        db.close()
-        return render_template('user_list.html', results=results, groups=groups)
-
-    except mysql.connector.Error as e:
-        print(f"Database error: {e}")
-        cursor.close()
-        db.close()
-        return "Database error", 500
+    users = get_all_users()
+    groups = get_all_groups()
+    return render_template('user_list.html', users=users, groups=groups)
 
 
-@user.route('/update_user', methods=['POST'])
-def update_user():
-    mac_address = request.form['mac_address']
-    description = request.form['description']
-    vlan_id = request.form['vlan_id']
-    new_mac_address = request.form.get('new_mac_address')
-
-    db = get_db()
-    if db:
-        cursor = db.cursor()
-        try:
-            db.autocommit = False
-
-            if new_mac_address and new_mac_address != mac_address:
-                cursor.execute("""
-                    UPDATE radcheck
-                    SET username = %s, value = %s
-                    WHERE username = %s
-                """, (new_mac_address, new_mac_address, mac_address))
-
-                cursor.execute("""
-                    UPDATE rad_description
-                    SET username = %s, description = %s
-                    WHERE username = %s
-                """, (new_mac_address, description, mac_address))
-
-                cursor.execute("""
-                    UPDATE radusergroup
-                    SET username = %s, groupname = %s
-                    WHERE username = %s
-                """, (new_mac_address, vlan_id, mac_address))
-            else:
-                cursor.execute("""
-                    UPDATE rad_description
-                    SET description = %s
-                    WHERE username = %s
-                """, (description, mac_address))
-
-                cursor.execute("""
-                    UPDATE radusergroup
-                    SET groupname = %s
-                    WHERE username = %s
-                """, (vlan_id, mac_address))
-
-            db.commit()
-            db.autocommit = True
-            cursor.close()
-            return "success"
-
-        except Exception as e:
-            db.rollback()
-            db.autocommit = True
-            cursor.close()
-            return str(e)
-        finally:
-            db.close()
-    return "Database Connection Failed"
+@user.route('/add', methods=['POST'])
+def add():
+    mac = request.form['mac_address']
+    desc = request.form.get('description', '')
+    group_id = request.form['group_id']
+    add_user(mac, desc, group_id)
+    return redirect(url_for('user.user_list'))
 
 
-@user.route('/delete_user/<mac_address>')
-def delete_user(mac_address):
-    db = get_db()
-    if db:
-        cursor = db.cursor()
-        try:
-            db.autocommit = False
-            cursor.execute("DELETE FROM rad_description WHERE username = %s", (mac_address,))
-            cursor.execute("DELETE FROM radcheck WHERE username = %s", (mac_address,))
-            cursor.execute("DELETE FROM radusergroup WHERE username = %s", (mac_address,))
-            db.commit()
-            cursor.close()
-            db.close()
-            return redirect(url_for('user.user_list'))
-        except mysql.connector.Error as err:
-            print(f"Database Error: {err}")
-            db.rollback()
-            cursor.close()
-            db.close()
-            return redirect(url_for('user.user_list'))
-    return "Database Connection Failed"
+@user.route('/update_description', methods=['POST'])
+def update_description_route():
+    mac = request.form['mac_address']
+    desc = request.form.get('description', '')
+    update_description(mac, desc)
+    return redirect(url_for('user.user_list'))
 
 
-@user.route('/add_user', methods=['POST'])
-def add_user():
-    try:
-        data = request.get_json()
-        mac_address = data.get('mac_address')
-        description = data.get('description')
-        vlan_id = data.get('vlan_id')
+@user.route('/update_vlan', methods=['POST'])
+def update_vlan_route():
+    mac = request.form['mac_address']
+    group_id = request.form['group_id']
+    update_vlan(mac, group_id)
+    return redirect(url_for('user.user_list'))
 
-        if not mac_address:
-            return jsonify({'success': False, 'message': 'MAC Address is required'}), 400
 
-        db = get_db()
-        if db is None:
-            return jsonify({'success': False, 'message': 'Database connection failed'}), 500
+@user.route('/delete', methods=['POST'])
+def delete():
+    mac = request.form['mac_address']
+    delete_user(mac)
+    return redirect(url_for('user.user_list'))
 
-        cursor = db.cursor()
-        try:
-            db.autocommit = False
-
-            cursor.execute("SELECT username FROM radcheck WHERE username = %s", (mac_address,))
-            if cursor.fetchone():
-                return jsonify({'success': False, 'message': 'User already exists'}), 400
-
-            cursor.execute("""
-                INSERT INTO radcheck (username, attribute, op, value)
-                VALUES (%s, 'Cleartext-Password', ':=', %s)
-            """, (mac_address, mac_address))
-
-            cursor.execute("""
-                INSERT INTO rad_description (username, description)
-                VALUES (%s, %s)
-            """, (mac_address, description))
-
-            cursor.execute("""
-                INSERT INTO radusergroup (username, groupname)
-                VALUES (%s, %s)
-            """, (mac_address, vlan_id))
-
-            db.commit()
-            db.autocommit = True
-            cursor.close()
-            db.close()
-            return jsonify({'success': True, 'message': 'User added successfully'})
-
-        except Exception as e:
-            db.rollback()
-            db.autocommit = True
-            cursor.close()
-            db.close()
-            return jsonify({'success': False, 'message': str(e)}), 500
-    except Exception:
-        return jsonify({'success': False, 'message': 'Unknown error'}), 500
-
-@user.route('/add_from_reject', methods=['POST'])
-def add_from_reject():
-    username = request.form.get('username')
-    groupname = request.form.get('groupname')
-
-    if not username or not groupname:
-        flash("Missing MAC address or group", "error")
-        return redirect(url_for('index.stats'))
-
-    db = get_db()
-    cursor = db.cursor()
-    try:
-        db.autocommit = False
-
-        # Check if already exists
-        cursor.execute("SELECT username FROM radcheck WHERE username = %s", (username,))
-        if cursor.fetchone():
-            flash(f"{username} already exists", "info")
-        else:
-            cursor.execute("""
-                INSERT INTO radcheck (username, attribute, op, value)
-                VALUES (%s, 'Cleartext-Password', ':=', %s)
-            """, (username, username))
-
-            cursor.execute("""
-                INSERT INTO rad_description (username, description)
-                VALUES (%s, '')
-            """, (username,))
-
-            cursor.execute("""
-                INSERT INTO radusergroup (username, groupname)
-                VALUES (%s, %s)
-            """, (username, groupname))
-
-            db.commit()
-            flash(f"{username} added to group {groupname}", "success")
-
-    except Exception as e:
-        db.rollback()
-        flash(f"Error: {str(e)}", "error")
-    finally:
-        db.autocommit = True
-        cursor.close()
-        db.close()
-
-    return redirect(url_for('index.stats'))
 
 @user.route('/refresh_vendors', methods=['POST'])
-def refresh_vendors():
-    db = get_db()
-    cursor = db.cursor(dictionary=True)
-
-    api_url = os.getenv('OUI_API_API_URL', 'https://api.maclookup.app/v2/macs/{}').strip('"')
-    api_key = os.getenv('OUI_API_API_KEY', '').strip('"')
-    limit = int(os.getenv('OUI_API_RATE_LIMIT', 2))
-    headers = {'Authorization': f'Bearer {api_key}'} if api_key else {}
-
-    cursor.execute("""
-        SELECT r.username
-        FROM radcheck r
-        LEFT JOIN mac_vendor_cache m ON UPPER(REPLACE(REPLACE(r.username, ':', ''), '-', '')) LIKE CONCAT(m.mac_prefix, '%')
-        WHERE m.vendor_name IS NULL OR m.vendor_name = 'Unknown Vendor'
-        LIMIT 5
-    """)
-    entries = cursor.fetchall()
-
-    if not entries:
-        cursor.close()
-        db.close()
-        return jsonify({"success": True, "updated": 0, "remaining": False})
-
-    updated = 0
-    for entry in entries:
-        mac = entry['username']
-        prefix = mac.replace(':', '').replace('-', '').upper()[:6]
-
-        try:
-            r = requests.get(api_url.format(mac), headers=headers, timeout=3)
-            if r.status_code == 200:
-                data = r.json()
-                vendor = data.get("company", "not found")
-
-                cursor.execute("""
-                    INSERT INTO mac_vendor_cache (mac_prefix, vendor_name, last_updated)
-                    VALUES (%s, %s, NOW())
-                    ON DUPLICATE KEY UPDATE vendor_name = VALUES(vendor_name), last_updated = NOW()
-                """, (prefix, vendor))
-                db.commit()
-                updated += 1
-        except Exception as e:
-            print(f"Error for {mac}: {e}")
-
-        time.sleep(1 / limit)
-
-    cursor.close()
-    db.close()
-
-    return jsonify({"success": True, "updated": updated, "remaining": True})
+def refresh():
+    refresh_vendors()
+    return {'status': 'OK'}
diff --git a/app/wsgi.py b/app/wsgi.py
index 6026b0f..90dc4c4 100644
--- a/app/wsgi.py
+++ b/app/wsgi.py
@@ -1,4 +1,3 @@
 from app import app
 
-if __name__ == "__main__":
-    app.run()
+# This file is used by Gunicorn to start the application
diff --git a/docker-compose.yml b/docker-compose.yml
index 515d5d8..601dca2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -23,7 +23,6 @@ services:
       timeout: 5s
       retries: 3
 
-services:
   radius:
     build:
       context: ./radius
diff --git a/radius/main.py b/radius/main.py
index 64a7f7b..d0f6122 100644
--- a/radius/main.py
+++ b/radius/main.py
@@ -39,7 +39,7 @@ class MacRadiusServer(Server):
             reply["Tunnel-Medium-Type"] = 6  # IEEE-802
             reply["Tunnel-Private-Group-Id"] = DEFAULT_VLAN_ID
             self.SendReplyPacket(pkt.fd, reply)
-            print(f"[INFO] MAC {mac} not found — assigned to fallback VLAN {DEFAULT_VLAN_ID}")
+            print(f"[INFO] MAC {username} not found — assigned to fallback VLAN {DEFAULT_VLAN_ID}")
 
         self.SendReplyPacket(pkt.fd, reply)