Rails Unpermitted 参数选择

Question

我正在尝试添加包含字符串列表的记录。

型号：

class Startup < ActiveRecord::Base
  before_validation(:on => :create) do
    self.mal = false
  end
  serialize :category
  attr_accessible :name, :url, :description, :category, :creator, :mal, :founded
end

但我的日志中仍然出现此错误：

Started POST "/startups" for 127.0.0.1 at 2013-04-25 05:05:00 -0300
Processing by StartupsController#create as JS
  Parameters: {"utf8"=>"✓", "startup"=>{"name"=>"test", "url"=>"http://startupcrawler.com", "category"=>["", "Analytics", "Fitness", "Gaming"], "founded(1i)"=>"2013", "founded(2i)"=>"4", "founded(3i)"=>"1", "description"=>"fdsa"}, "commit"=>"Create Startup"}
Unpermitted parameters: category
  [1m[35m (0.2ms)[0m  BEGIN
  [1m[36m (0.2ms)[0m  [1mROLLBACK[0m
Completed 500 Internal Server Error in 85ms

我做错了什么？为什么类别不会序列化？

编辑：

刚刚发现这种方法已被弃用，我正在使用 Rails 4...我应该改用什么？

编辑 2：

现在在日志中得到这个：

Started POST "/startups" for 127.0.0.1 at 2013-04-25 05:30:33 -0300
Processing by StartupsController#create as JS
  Parameters: {"utf8"=>"✓", "startup"=>{"name"=>"blah", "url"=>"http://startupcrawler.com", "category"=>["", "Fitness"], "founded(1i)"=>"2013", "founded(2i)"=>"4", "founded(3i)"=>"1", "description"=>"fdsa"}, "commit"=>"Create Startup"}
  [1m[36m (0.2ms)[0m  [1mBEGIN[0m
  [1m[35m (0.5ms)[0m  ROLLBACK
  Rendered startups/_form.html.erb (16.1ms)
  Rendered startups/new.html.erb within layouts/application (18.9ms)
Completed 200 OK in 128ms (Views: 29.9ms | ActiveRecord: 0.8ms)

但没有创建新记录（出于某种原因回滚）。

我从模型中删除了serialize :category。这现在在我的控制器中：

def startup_params
      params.require(:startup).permit(:name, :url, :added, :founded, :mal, :creator, :description, {:category => []})
end

Answer 1

出于这个原因，Strong parameters 被内置到 Rails 4 中。