Ok, best practice question. When are the best entry points to validate user input and what types of input are each of them best at validating?