ruby on rails - Difference between attr_accessor and attr_accessible - Stack Overflow

ruby on rails - Difference between attr_accessor and attr_accessible - Stack Overflow:

attr_accessor is a Ruby method that gives you setter and getter methods to an instance variable of the same name. So it is equivalent to class MyModel def my_variable @my_variable end def my_variable=(value) @my_variable = value end end attr_accessible is a Rails method that determines what variables can be set in a mass assignment. For example, when you submit a form, and you have something like MyModel.new params[:my_model] then you want to have a little bit more control, so that people can't submit things that you don't want them to. For example, you might do attr_accessible :email so that when someone updates their account, they can change their email address. But you wouldn't do attr_accessible :email , :salary because then a person could set their salary through a form submission. In other words, they could hack their way to a raise, costing your company real money. ...

Full article: http://stackoverflow.com/questions/3136420/difference-bet...