Well said. I blogged about this same thing about 3 years ago (http://web.elctech...

		dylanz on Jan 4, 2010 \| parent \| context \| favorite \| on: Ruby on Rails: Secure Mass Assignment Well said. I blogged about this same thing about 3 years ago (http://web.elctech.com/2007/03/01/securing-your-models/). It's amazing how many application I come across that don't protect their attributes.