Validate the code as submitted, not as it is in the database