If you do it frontend only, people can edit your source code, and make a validater ignore your form, and past in code that can SQL inject your website.
You always do the backend, and if you want pretty animation then do the frontend, with jQuery validation or others :-)