attr_protected / attr_accessible is the lamest workaround in rails. Tons of overhead and potential bugs just so you can have a one line controller. Better idea

attr_protected / attr_accessible is the lamest workaround in rails. Tons of overhead and potential bugs just so you can have a one line controller. Better idea: just set the attributes you want explicitly in the controller. Then your forms will never set data that you don't want it to.