everything sent by the user could be modified