I can\'t find any tutorials for newbies. Aren\'t there any simple rules for using attr_accessible? Should I use it for attributes that users can set from forms?
What
Check this out: Use attr_protected or we will hack you