That's not the front-end job. You can do common sense stuff, but any real protection needs to be on the backend. Any front end validation is basically "plz don't hax"