diff --git a/ajax_handler.php b/ajax_handler.php
index 0a48520..68946d1 100644
--- a/ajax_handler.php
+++ b/ajax_handler.php
@@ -1,5 +1,9 @@
 <?php
 session_start();
+if (!isset($_SESSION['user_id'])) {
+    header('Location: index.php');
+    exit;
+}
 require_once __DIR__ . '/db/config.php';
 require_once __DIR__ . '/api/LocalLubanApi.php';
 
@@ -67,7 +71,7 @@ try {
                 }
                 echo json_encode(['code' => 0, 'data' => $data], JSON_UNESCAPED_UNICODE);
             } else {
-                echo json_encode($res ?: ['code' => 500, 'msg' => '获取项目列表失败'], JSON_UNESCAPED_UNICODE);
+                echo json_encode($res ?: ['code' => 500, 'msg' => '获取项目列表 失败'], JSON_UNESCAPED_UNICODE);
             }
             break;
 
@@ -75,7 +79,7 @@ try {
             $service_id = $_GET['service_id'] ?? '';
             $country_name = $_GET['country_name'] ?? '未知国家';
             $service_name = $_GET['service_name'] ?? '未知项目';
-            $price = (float)($_GET['price'] ?? 0);
+            $price = round((float)($_GET["price"] ?? 0), 2);
             
             $stmt = $pdo->prepare("SELECT balance FROM users WHERE id = ?");
             $stmt->execute([$_SESSION['user_id']]);
@@ -103,6 +107,30 @@ try {
                 echo json_encode($res ?: ['code' => 500, 'msg' => 'API获取号码失败'], JSON_UNESCAPED_UNICODE);
             }
             break;
+            
+        case 'release_number':
+            $request_id = $_GET['request_id'] ?? '';
+            $stmt = $pdo->prepare("SELECT * FROM sms_orders WHERE request_id = ? AND user_id = ? AND status = 'pending'");
+            $stmt->execute([$request_id, $_SESSION['user_id']]);
+            $order = $stmt->fetch();
+            if ($order) {
+                $api->releaseNumber($request_id);
+                $pdo->beginTransaction();
+                try {
+                    $stmt = $pdo->prepare("UPDATE sms_orders SET status = 'canceled' WHERE request_id = ?");
+                    $stmt->execute([$request_id]);
+                    $stmt = $pdo->prepare("UPDATE users SET balance = balance + ? WHERE id = ?");
+                    $stmt->execute([$order['cost'], $_SESSION['user_id']]);
+                    $pdo->commit();
+                    echo json_encode(['code' => 0, 'msg' => '成功']);
+                } catch (Exception $e) {
+                    $pdo->rollBack();
+                    echo json_encode(['code' => 500, 'msg' => '错误']);
+                }
+            } else {
+                echo json_encode(['code' => 400, 'msg' => '无效操作']);
+            }
+            break;
 
         case 'check_sms':
             $request_id = $_GET['request_id'] ?? '';
@@ -114,118 +142,11 @@ try {
             echo json_encode($res ?: ['code' => 500, 'msg' => 'API Error'], JSON_UNESCAPED_UNICODE);
             break;
 
-        case 'create_recharge':
-            $amount = (float)($_POST['amount'] ?? 0);
-            if ($amount < 10) { echo json_encode(['code' => 400, 'msg' => '最低充值金额为 10 USDT']); break; }
-            $final_amount = floor($amount) + (rand(1, 99) / 100);
-            $stmt = $pdo->prepare("INSERT INTO recharges (user_id, amount, txid, status) VALUES (?, ?, 'Manual/Auto', 'pending')");
-            $stmt->execute([$_SESSION['user_id'], $final_amount]);
-            echo json_encode(['code' => 0, 'recharge_id' => $pdo->lastInsertId(), 'amount' => $final_amount]);
-            break;
-
-        case 'check_recharge_status':
-            $recharge_id = $_GET['recharge_id'] ?? '';
-            $stmt = $pdo->prepare("SELECT * FROM recharges WHERE id = ? AND user_id = ?");
-            $stmt->execute([$recharge_id, $_SESSION['user_id']]);
-            $recharge = $stmt->fetch();
-            if (!$recharge) { echo json_encode(['code' => 404, 'msg' => '未找到充值订单']); break; }
-            if ($recharge['status'] === 'completed') { echo json_encode(['code' => 0, 'status' => 'completed']); break; }
-            echo json_encode(['code' => 0, 'status' => 'pending']);
-            break;
         case "get_active_orders":
-            $stmt = $pdo->prepare("SELECT * FROM sms_orders WHERE user_id = ? AND status != "canceled" ORDER BY created_at DESC");
+            $stmt = $pdo->prepare("SELECT * FROM sms_orders WHERE user_id = ? AND status IN ('pending', 'received') ORDER BY created_at DESC");
             $stmt->execute([$_SESSION["user_id"]]);
             echo json_encode(["code" => 0, "data" => $stmt->fetchAll(PDO::FETCH_ASSOC)], JSON_UNESCAPED_UNICODE);
             break;
-            $stmt->execute([$_SESSION["user_id"]]);
-            echo json_encode(["code" => 0, "data" => $stmt->fetchAll(PDO::FETCH_ASSOC)], JSON_UNESCAPED_UNICODE);
-            break;
-
-case "upload_image":
-$file = $_FILES["image"] ?? null;
-if ($file) {
-$ext = pathinfo($file["name"], PATHINFO_EXTENSION);
-$name = "uploads/" . bin2hex(random_bytes(8)) . "." . $ext;
-move_uploaded_file($file["tmp_name"], __DIR__ . "/" . $name);
-echo json_encode(["code" => 0, "url" => $name]);
-} else {
-echo json_encode(["code" => 400, "msg" => "上传失败"]);
-}
-break;
-        case 'send_message':
-            $message = trim($_POST['message'] ?? '');
-            $target_user_id = $_POST['user_id'] ?? $_SESSION['user_id'];
-            if (!$message) { echo json_encode(['code' => 400, 'msg' => '消息内容不能为空']); break; }
-            
-            $stmt = $pdo->prepare("SELECT role FROM users WHERE id = ?");
-            $stmt->execute([$_SESSION['user_id']]);
-            $role = $stmt->fetchColumn();
-            $sender = ($role === 'admin') ? 'admin' : 'user';
-
-            $stmt = $pdo->prepare("INSERT INTO support_messages (user_id, sender, message, `is_read`) VALUES (?, ?, ?, 0)");
-            $stmt->execute([$target_user_id, $sender, $message]);
-            echo json_encode(['code' => 0, 'msg' => '已发送']);
-            break;
-
-        case 'get_messages':
-            $target_user_id = $_GET['user_id'] ?? $_SESSION['user_id'];
-            $stmt = $pdo->prepare("SELECT role FROM users WHERE id = ?");
-            $stmt->execute([$_SESSION['user_id']]);
-            $isAdmin = ($stmt->fetchColumn() === 'admin');
-            
-            if (!$isAdmin && (int)$target_user_id !== (int)$_SESSION['user_id']) {
-                echo json_encode(['code' => 403, 'msg' => 'Forbidden']); break;
-            }
-
-            if ($isAdmin && (int)$target_user_id !== (int)$_SESSION['user_id']) {
-                $pdo->prepare("UPDATE support_messages SET `is_read` = 1 WHERE user_id = ? AND sender = 'user'")->execute([$target_user_id]);
-            } else if (!$isAdmin) {
-                $pdo->prepare("UPDATE support_messages SET `is_read` = 1 WHERE user_id = ? AND sender = 'admin'")->execute([$_SESSION['user_id']]);
-            }
-
-            $stmt = $pdo->prepare("SELECT * FROM support_messages WHERE user_id = ? ORDER BY id ASC");
-            $stmt->execute([$target_user_id]);
-            echo json_encode(['code' => 0, 'data' => $stmt->fetchAll()]);
-            break;
-
-        case 'get_chat_users':
-            $stmt = $pdo->prepare("SELECT role FROM users WHERE id = ?");
-            $stmt->execute([$_SESSION['user_id']]);
-            if ($stmt->fetchColumn() !== 'admin') { echo json_encode(['code' => 403, 'msg' => 'Forbidden']); break; }
-
-            // Optimized query to get last message reliably
-            $stmt = $pdo->query("
-                SELECT u.id, u.username, m.message as last_message, m.created_at as last_time,
-                (SELECT COUNT(*) FROM support_messages WHERE user_id = u.id AND sender = 'user' AND `is_read` = 0) as unread_count
-                FROM users u
-                JOIN (SELECT user_id, MAX(id) as max_id FROM support_messages GROUP BY user_id) last_msg_idx ON u.id = last_msg_idx.user_id
-                JOIN support_messages m ON m.id = last_msg_idx.max_id
-                ORDER BY m.id DESC
-            ");
-            echo json_encode(['code' => 0, 'data' => $stmt->fetchAll()]);
-            break;
-
-        case 'check_new_messages':
-            $stmt = $pdo->prepare("SELECT role FROM users WHERE id = ?");
-            $stmt->execute([$_SESSION['user_id']]);
-            $role = $stmt->fetchColumn();
-            if ($role === 'admin') {
-                $stmt = $pdo->query("
-                    SELECT m.*, u.username 
-                    FROM support_messages m 
-                    JOIN users u ON m.user_id = u.id 
-                    WHERE m.sender = 'user' AND m.`is_read` = 0 
-                    ORDER BY m.id DESC LIMIT 1
-                ");
-                $last_unread = $stmt->fetch(PDO::FETCH_ASSOC);
-                $total_unread = $pdo->query("SELECT COUNT(*) FROM support_messages WHERE sender = 'user' AND `is_read` = 0")->fetchColumn();
-                echo json_encode(['code' => 0, 'unread_total' => $total_unread, 'last_user' => $last_unread['username'] ?? '']);
-            } else {
-                $stmt = $pdo->prepare("SELECT COUNT(*) FROM support_messages WHERE user_id = ? AND sender = 'admin' AND `is_read` = 0");
-                $stmt->execute([$_SESSION['user_id']]);
-                echo json_encode(['code' => 0, 'unread_total' => $stmt->fetchColumn()]);
-            }
-            break;
 
         default:
             echo json_encode(['code' => 404, 'msg' => '未知请求']);
diff --git a/assets/pasted-20260322-133027-80414c03.png b/assets/pasted-20260322-133027-80414c03.png
new file mode 100644
index 0000000..768645f
Binary files /dev/null and b/assets/pasted-20260322-133027-80414c03.png differ
diff --git a/assets/pasted-20260322-133227-48c54bf2.png b/assets/pasted-20260322-133227-48c54bf2.png
new file mode 100644
index 0000000..573c615
Binary files /dev/null and b/assets/pasted-20260322-133227-48c54bf2.png differ
diff --git a/assets/pasted-20260322-133628-3e9eff74.png b/assets/pasted-20260322-133628-3e9eff74.png
new file mode 100644
index 0000000..768645f
Binary files /dev/null and b/assets/pasted-20260322-133628-3e9eff74.png differ
diff --git a/assets/pasted-20260322-134533-ffbda01f.png b/assets/pasted-20260322-134533-ffbda01f.png
new file mode 100644
index 0000000..dc8e7b2
Binary files /dev/null and b/assets/pasted-20260322-134533-ffbda01f.png differ
diff --git a/assets/pasted-20260322-135053-53cd0f6c.png b/assets/pasted-20260322-135053-53cd0f6c.png
new file mode 100644
index 0000000..26af26f
Binary files /dev/null and b/assets/pasted-20260322-135053-53cd0f6c.png differ
diff --git a/assets/pasted-20260322-135540-4f01042f.png b/assets/pasted-20260322-135540-4f01042f.png
new file mode 100644
index 0000000..730af6b
Binary files /dev/null and b/assets/pasted-20260322-135540-4f01042f.png differ
diff --git a/assets/pasted-20260322-140127-24c1e5aa.png b/assets/pasted-20260322-140127-24c1e5aa.png
new file mode 100644
index 0000000..c02b00c
Binary files /dev/null and b/assets/pasted-20260322-140127-24c1e5aa.png differ
diff --git a/assets/pasted-20260322-141554-d688911c.png b/assets/pasted-20260322-141554-d688911c.png
new file mode 100644
index 0000000..6144efd
Binary files /dev/null and b/assets/pasted-20260322-141554-d688911c.png differ
diff --git a/assets/pasted-20260322-142108-d74f625e.png b/assets/pasted-20260322-142108-d74f625e.png
new file mode 100644
index 0000000..07f5ec0
Binary files /dev/null and b/assets/pasted-20260322-142108-d74f625e.png differ
diff --git a/dashboard.php b/dashboard.php
index 79ad9ad..10f87d7 100644
--- a/dashboard.php
+++ b/dashboard.php
@@ -327,19 +327,13 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
         <div class="active-tasks-area" id="activeTasksSection" style="display: none;">
             <div class="active-tasks-header">
                 <span class="fw-bold text-primary"><i class="fas fa-satellite-dish me-2"></i> 活跃任务</span>
-                <button class="btn btn-link btn-sm text-decoration-none fw-bold" onclick="loadActiveOrders()" style="color: #64748b;">
-                    <i class="fas fa-sync-alt me-1"></i> 刷新
-                </button>
             </div>
             <div class="table-responsive">
                 <table class="table table-hover mb-0 align-middle">
                     <thead>
                         <tr class="text-muted small">
                             <th class="ps-4">项目/地区</th>
-                            <th>号码</th>
-                            <th>短信内容</th>
-                            <th>状态</th>
-                            <th>剩余时间</th>
+                            <th>号码/剩余时间</th>
                             <th class="text-end pe-4">操作</th>
                         </tr>
                     </thead>
@@ -382,7 +376,6 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
 
         <div class="d-flex justify-content-between align-items-center mb-3 px-1">
             <h6 class="fw-bold mb-0" style="color: #475569;">实时行情列表</h6>
-            <span class="badge bg-light text-muted fw-normal" id="lastUpdated">已就绪</span>
         </div>
 
         <div class="quotation-wrapper border rounded-4 overflow-hidden" style="border-color: #e2e8f0 !important;">
@@ -431,10 +424,6 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
         renderServices(popularServices);
         loadActiveOrders();
         setInterval(loadActiveOrders, 10000);
-
-        document.addEventListener('click', (e) => {
-            if (!e.target.closest('.custom-dropdown')) hideAllDropdowns();
-        });
     });
 
     function showToast(msg, type = 'success') {
@@ -471,7 +460,7 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
         if (event) event.stopPropagation();
         const d = document.getElementById(id);
         const isShow = d.classList.contains('show');
-        hideAllDropdowns();
+        document.querySelectorAll('.dropdown-menu-custom').forEach(dd => dd.classList.remove('show'));
         if (!isShow) {
             d.classList.add('show');
             const input = d.querySelector('input');
@@ -479,10 +468,6 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
         }
     }
     
-    function hideAllDropdowns() { 
-        document.querySelectorAll('.dropdown-menu-custom').forEach(d => d.classList.remove('show')); 
-    }
-
     function renderCountries(filter = '') {
         const container = document.getElementById('countriesList');
         if (!container) return;
@@ -543,7 +528,7 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
         const l = document.getElementById('countryLabel');
         l.textContent = c.name_zh;
         l.classList.remove('placeholder'); l.classList.add('val');
-        hideAllDropdowns();
+        document.querySelectorAll('.dropdown-menu-custom').forEach(dd => dd.classList.remove('show'));
         loadQuotation();
     }
 
@@ -552,7 +537,7 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
         const l = document.getElementById('serviceLabel');
         l.textContent = s.name;
         l.classList.remove('placeholder'); l.classList.add('val');
-        hideAllDropdowns();
+        document.querySelectorAll('.dropdown-menu-custom').forEach(dd => dd.classList.remove('show'));
         loadQuotation();
     }
 
@@ -610,43 +595,35 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
             const data = await res.json();
             const body = document.getElementById('activeTasksBody');
             const section = document.getElementById('activeTasksSection');
-            const latestArea = document.getElementById('latestOrderArea');
-            const latestContent = document.getElementById('latestOrderContent');
             
             if (data.code === 0 && Array.isArray(data.data) && data.data.length > 0) {
                 section.style.display = 'block';
                 body.innerHTML = '';
                 
-                const receivedList = data.data.filter(o => o.status === 'received');
-                if (receivedList.length > 0) {
-                    const latest = receivedList.sort((a,b) => new Date(b.created_at) - new Date(a.created_at))[0];
-                    const now = new Date();
-                    const rAt = new Date(latest.created_at.replace(/-/g, "/").replace(" ", "T") + "Z");
-                    if ((now - rAt) / 1000 < 300) {
-                        latestArea.style.display = 'block';
-                        latestContent.innerHTML = `
-                            <div class="col-md-3">项目: ${latest.service_name}</div>
-                            <div class="col-md-3">号码: <span class="fw-bold text-primary">${latest.number}</span></div>
-                            <div class="col-md-4">短信: <span class="text-dark fw-bold">${latest.sms_content}</span></div>
-                            <div class="col-md-2"><button class="btn btn-sm btn-danger" onclick="releaseNumber('${latest.request_id}')">取消</button></div>
-                        `;
-                    } else { latestArea.style.display = 'none'; }
-                } else { latestArea.style.display = 'none'; }
-
                 data.data.forEach(o => {
                     const row = document.createElement('tr');
+                    const expireAt = new Date(o.expire_at.replace(/-/g, "/").replace(" ", "T"));
+                    const now = new Date();
+                    const diffMs = expireAt - now;
+                    const diffMinutes = Math.floor(diffMs / 60000);
+                    const diffSeconds = Math.floor((diffMs % 60000) / 1000);
+                    
+                    if (diffMs < 0) {
+                        // Do not auto-release here, let the status update or user handle it
+                        continue;
+                    }
+                    
+                    const timeRemaining = `${diffMinutes}分${diffSeconds}秒`;
+
                     row.innerHTML = `
-                        <td>${o.service_name} / ${o.country_name}</td>
-                        <td class="fw-bold">${o.number}</td>
-                        <td>${o.status === 'received' ? o.sms_content : '等待中...'}</td>
-                        <td>${o.status}</td>
-                        <td>${o.expire_at}</td>
-                        <td class="text-end"><button class="btn btn-sm btn-outline-danger" onclick="releaseNumber('${o.request_id}')">释放</button></td>
+                        <td class="ps-4">${o.service_name} / ${o.country_name}</td>
+                        <td>${o.number || ''} <span class="text-muted ms-2">${timeRemaining}</span></td>
+                        <td class="text-end pe-4"><button class="btn btn-sm btn-outline-danger fw-bold" onclick="releaseNumber('${o.request_id}')">取消</button></td>
                     `;
                     body.appendChild(row);
                     if (o.status !== 'received' && !activePolls[o.request_id]) startPolling(o.request_id);
                 });
-            } else { section.style.display = 'none'; latestArea.style.display = 'none'; }
+            } else { section.style.display = 'none'; }
         } catch (e) {}
     }
 
@@ -655,7 +632,7 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
             try {
                 const res = await fetch(`${apiHandler}?action=check_sms&request_id=${rid}`);
                 const data = await res.json();
-                if (data.code === 0 && (data.msg === 'success' || data.sms_code)) {
+                if (data.code === 0 && data.sms_code) {
                     clearInterval(activePolls[rid]); delete activePolls[rid]; showSmsModal(data.sms_code); loadActiveOrders();
                 }
             } catch (e) {}
@@ -665,6 +642,8 @@ $notice_text = $settings['notice_text'] ?? '欢迎使用全球接码平台！';
     async function releaseNumber(id) {
         try {
             const res = await fetch(`${apiHandler}?action=release_number&request_id=${id}`);
+            const data = await res.json();
+            if (data.code === 0) { showToast("已取消"); } else { showToast(data.msg || "取消失败", "error"); }
             loadActiveOrders(); updateBalance();
         } catch (e) {}
     }