It's an Open AI service, that's intelligence I gained by hacking, I got it to tell me its name. Once it was "ChatGPT by OpenAI" and another time it was "AIAssis

It's an Open AI service, that's intelligence I gained by hacking, I got it to tell me its name. Once it was "ChatGPT by OpenAI" and another time it was "AIAssistant by OpenAI". Of course it's assuming that nobody lied to me. Whatever. And of course the general rule is: validate both on the client and on the server. Clientside validation is for filtering work for the server and serverside validation is for people like you who either hack the form or use curl directly. That's old news, but the same mistakes tend to repeated by everybody, myself included.