Comment 7 for bug 1016654

I believe something more robust (aka, server-side) is needed as we shouldn't be relying on JavaScript for input validation. Well, inside the staff client where we know it is turned on perhaps, but relying on it outside of the staff client seems problematic.