A developer stores a derived total in a hidden page item and trusts it when charging the customer. What is safer?

1. Rename the hidden item to SECURE_TOTAL
2. Recompute or validate the authoritative amount on the server from trusted data
3. Set the item's CSS visibility to hidden twice
4. Increase the number of decimal places in the browser