moving emoticon validation to server side to prevent crazy hacks