3 ms·

Never trust the (web) client, sanitize/validate the shit out of everything, and stop using JavaScript...