So, btw. why this is checked on frontend and not backend? Following topic we discussed off line - if you can do it on backend - do it on backend (except, this is not a solid rule all the time).