I\'m coding on a website with forms and use HTML5 validation - no rocket science so far. Everything works fine for me in Google Chrome, but I want to get sure that even a IE 6 u
You should absolutely be validating on the server if you are building any SQL strings.
In the client you should be able to fall-back to JavaScript-based validation, but that's no protection. Do it on the server as well.