1 files changed, 7 insertions, 3 deletions

@@ -1,5 +1,7 @@
 module Lingo
   class ScoresController < ApplicationController
+    skip_before_action :verify_authenticity_token, only: [:update]
+
     def index
       @scores = Score.order(score: :desc)
     end
@@ -8,13 +10,15 @@ module Lingo
       if params[:secret_code] != Lingo.secret_code then
         head :unauthorized
       else
-        score = Score.find_or_create_by(user_id: params[:user_id])
+        score = Score.find_or_create_by(user_id: params[:user_id]) do |score|
+          score.score = 0
+        end
         score.username = params[:username]
-        score.avatar_url = params[:avatar_url]
+        score.avatar_url = CGI.unescape(params[:avatar_url])
         score.score += 1
         score.save!
 
-        render :blank
+        head :created
       end
     end
   end