Settings save

app/controllers/user_controller.rb

@@ -40,19 +40,23 @@ class UserController < ApplicationController
   
   def update
     return unless authorized?
+    allowed_params = [:name, :email, :lang, :show]
     @res = {}
     
     user = User.find_by_vkid(params[:mid])
-    
-    render :json => request
-    return
-    
-    unless params[:username].nil? or params[:email].nil?
-      user.name = params[:username]
-      user.email = params[:email]
-      user.lang = params[:lang] if ['ru', 'en'].include? params[:lang]
+    update_params = {}
+    params[:params] = params[:params].each{ |k, v| update_params[k.to_sym] = v }
+    if (update_params.keys - allowed_params).empty?
+      if update_params.include? :show
+        update_params[:show].map!{ |k, v| k.to_sym }
+      end
+      
+      params[:params].each do |k, v|
+        user[k] = v
+      end
       user.save
     end
+    
     @res[:user] = {
       :id => user.id,
       :name => user.name,