Hacker News new | past | comments | ask | show | jobs | submit login

You would modify the hidden form values (or add parameters that didn't exist) depending on the situation. These new/modified parameters would appear in Rails' params hash which would then be passed to the update function which, by default, will update any fields you hand it.



This really doesn't sound like a problem with the update function, this just sounds like web applications 101 - don't trust user data.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: