|
I always validate server-side no matter what. I get that figured out first, and usually add some javascript validation to let the user know immediately what is wrong with their input to cut down on http requests.
At the very least, validate server-side, because anyone can post anything to your server.
|