Question

I am using form_for, but I’m not sure how to create the password and password confirmation using the helpers?

I have so far:

<%= form_for :user, @user, ....   do |f| %>

<%= f.text_field :user_name, :class ....  %>

password??

<% end %>

Also, when posting to the /user/create action, how to do I prevent certain fields in the model from being initialized when using:

@user = User.new(params[:user])

Answer 1

Put this in your view form:

<%= f.password_field :password %>
<%= f.password_field :password_confirmation %>

And this in your user model:

validates_confirmation_of :password

Now, to prevent unwanted initializations in your controller, add the following to your model:

attr_accessible :attribute1, attribute2

Now these attributes will be the only attributes that can be set through what is called “mass assignment”.