Never trust the client