As said earlier. Have you tested by sending a manipulated report?