In some sensitive apps, like payment systems, code is set up as such: when user sends info to server, for example:
{money_amount: 5, receiver_id: 2}