I used the following advice to set up new_invoice_path in my app:
How can I (using the outlined scenario in the question/answer I linked to above) make it so that when a user clicks a link to create a new invoice for a specific account the account_id passes to the form but does not show up in the URL?
I view the current solution (pass account_id to form via URL) as problematic because...
- Someone could easily modify the URL and start creating invoices in different accounts.
- It looks sloppy (especially if you start trying to pass things other than just account_id)