Ruby on Rails Security Guide

Another useful thing to consider are attr_protected and attr_accessible. See http://manuals.rubyonrails.com/read/chapter/47

Also, see this Rails security blog: http://www.rorsecurity.info/

That's a great resource. I know I'll definitely be referring back to this.

thank you!