To avoid malicious intent , need to validate bot client and server side. is there any thumb rule or validation class available.