For the validation you should use server validation instead of client side validation:
http://www.webassist.com/tutorials/Add-server-validation-to-your-web-forms
client sie validation is not that reliable and can be easily disabled, whereas server validation is much more robust.