Which of the following is not recommended to secure web applications against authenticated users?
i) Running the application with least privileges
ii) Client-side data validation
iii) Filtering data with a default deny regular expression
iv) Using parameterized queries to access a database