diff --git a/app/controllers/announcements_controller.rb b/app/controllers/announcements_controller.rb
--- a/app/controllers/announcements_controller.rb
+++ b/app/controllers/announcements_controller.rb
@@ -7,8 +7,7 @@
   # GET /announcements
   # GET /announcements.xml
   def index
-    @announcements = Announcement.find(:all,
-                                       :order => "created_at DESC")
+    @announcements = Announcement.order(created_at: :desc)
 
     respond_to do |format|
       format.html # index.html.erb
@@ -66,7 +65,7 @@
     @announcement = Announcement.find(params[:id])
 
     respond_to do |format|
-      if @announcement.update_attributes(params[:announcement])
+      if @announcement.update_attributes(announcement_params)
         flash[:notice] = 'Announcement was successfully updated.'
         format.html { redirect_to(@announcement) }
         format.js   {}
@@ -108,4 +107,10 @@
       format.xml  { head :ok }
     end
   end
+
+  private
+
+    def announcement_params
+      params.require(:announcement).permit(:author, :body, :published, :frontpage, :contest_only,:title, :note)
+    end
 end