Hi Femi Olubode,

In this article, I explained detail about this Forbidden Attributes Error, you have to use strong parameters before updating the user.

def user_params
  params.require(:user).permit(:username, :name, :website,
                               :bio, :email, :phone, :gender)
end

and then,

current_user.update(user_params)

Cheers,

Luan Nguyen