Never depend on the client to do your validation. Client side validation is a courtesy and/or usability issue, not something you can rely on in any way. Always do server side validation.