Strong Params

It forces you to whitelist the attributes that can be saved.

def book_params
  params.require(:book).permit(:title, :author, :cover, :language)
end