Example usage of the strong_parameters gem.

users_controller.rb

class UsersController < ApplicationController
  def update
    current_user.update_attributes(user_params)
  end
 
private
 
  def user_params
    params.require(:user).permit(:email, :password)
  end
end