Your site may be at risk! When using mass assignment, you are giving the user complete control over that model and its associations. See how a hacker might use this vulnerability and learn how to stop it in this episode.
RubyTu.be is a community driven collection of Ruby related videos and screencasts. Questions? Comments? Contact RubyTu.be via e-mail or click on the Feedback GetSatisfaction widget found on the other side of the page.