Umm, no matter what the client side does in terms of validation, the server side needs to validate. There is no way to ensure that all input into the server side will come through your javascript. I usually do some of each - trap what errors I can in JavaScript and check *everything* in Perl anyway.