on the client-side, it's rather easy to verify everything but addresses, which require pinging into the google maps api (or something similar), and i'd rather not add more complexity and http calls to the application than required, hence why i think this should be done server-side