Validation should be done both at the entry level as well as the server. Banning inappropriate words is not as easy as it sounds and should also include things like viagra etc.. for spammers. Most routines out there will not capture this:

a s s :)