A great example on why not to depend on client side validation only:
http://thedailywtf.com/forums/65974/ShowPost.aspx