To which side ( server ? client) does the user input data validation occur? Explain the reasons for it?