User uses a proxy to bypass the client side validation, that’s the first thing I would have done as a teenager