title: not getting forbidden attribute error.?
body: <p>I am using <code>rails4 and ruby2.0.0</code></p>
  
  <p>When I do</p>
  
  <pre><code> def create
      @post  = Post.create(params[:post])
      redirect_to posts_path
   end
  </code></pre>
  
  <p>then I get <code>forbidden attribute error</code>, which is ok - I know this behaviour means I have to permit params like <code>params.require(:post).permit(:title,:content)</code></p>
  
  <p>But when I do this</p>
  
  <pre><code>def create
      @post  = Post.create(:title=&gt;params[:post][:title], :content=&gt;params[:post][:content])
      redirect_to posts_path
  end
  </code></pre>
  
  <p>it doesn't asks for permitting params, i.e., I didn't get any forbidden attribute error, it saves the post record in database.</p>
  
  <p>Can anyone please explain me this strange behaviour, why 2nd one does not require params to permit?</p>