Thanks for your suggestion, i agree with you on that, the server side validation is _necessary_ .