Ruby on Rails Security Guide (quarkruby.com)

That's a great resource. I know I'll definitely be referring back to this.

Another useful thing to consider are attr_protected and attr_accessible. See http://manuals.rubyonrails.com/read/chapter/47

Also, see this Rails security blog: http://www.rorsecurity.info/

thank you!