You need to ensure that all data that is submitted passes validation before the data is saved in a database