ditto -

i validate on the client side, (ASP/JSP), and in the database layer. the more validation the better.l