« Previous post Next post »

Use attr_accessible to protect from mass assignment