It's easy to prevent it client-side, but does anyone know of a server-side solution because we should not be trusting data from the client?