are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass
the client-side checks by modifying values after the checks have been performed, or
by changing the client to remove the client-side checks entirely. Then, these modified
values would be submitted to the server.