<form action="/your_action/<%= escape_url(params[:id]) %>" method="post">
  <input name="authenticity_token" type="hidden" value="<%= form_authenticity_token %>"/>
  <input name="_method" type="hidden" value="put" />
...
</form>