Upgrade to Rails 4 with strong parameters support.  Might as well do this before it becomes a huge pain in the ass