I was looking at an authentication system which had this code:

```
  # prevents a user from submitting a crafted form that bypasses activation
  # anything else you want your user to change should be added here.
  attr_accessible :login, :email, :password, :password_confirmation, :first_name, :last_name

```

I don't understand why attr\_accessible is applied to these properties. 

Is the comment correct that this prevents a user from forging a form to manipulate user data? If so, why?