You can defeat all client side verification by definition if you know what verification is run.