[Mass assignment](http://en.wikipedia.org/wiki/Mass_assignment_vulnerability) spotted! Use a whitelist containing the field names that can be updated.