Filter params allowed to go thru

gistfile1.rb

  # Make sure that we don't allow attributes to be mass assigned from Backbone saves
  # http://www.quora.com/Backbone-js-1/How-well-does-backbone-js-work-with-rails 
  # Always whitelist and validate your incoming attributes.
  #
  # Usage 
  #
  #    model.update_attributes pick(params, :title, :description)
  #
  def pick(hash, *keys)
    filtered = {}
    hash.each do |key, value| 
      filtered[key.to_sym] = value if keys.include?(key.to_sym) 
    end
    filtered
  end