spree/spree-multi-domain — pull request #17 by parndt (2012-09-05 21:16:36+00:00)
Title: Make store_id not attr_accessible for security.

This should be set in the controller, no?