Client validation is easier... just add the required attribute to any field that needs to be validated. Server validation is the stronger validation, but more difficult to pull off and may be more work than it is worth since this form is for authenticated users that wouldn't probably do something like disable javascript to get around the client validation.