Earlier quoted context omitted.
Client side and server side validations need (should!) not be the same — i'd make serverside validation stricter. Client side is for eliminating honest mistakes not preflighting exploits.
Could you give an off the top of your head example?
A hack attempt may be a direct POST circumventing any client side checks.