I have a lengthy form which heavily uses client-side validation (written in jQuery). To prevent users with disabled JavaScript submitting the form, I have included a hidden
Server side validation is a must, client side validation is to do as much as is practical without the overhead of a round trip to the server.