Always do server-side validation · HackerTrans