It is quite important to validate user input server-side for security
reasons. Anything that will be used to form part of an SQL query or
command must be checked. Client-side filtering is fine to prevent
unnecessary round trips but it won't block malicious software spoofing
a web browser.