Serious question, if you do most logic in the frontend then where do you do the server side input validation and where do you do the business logic? If I fumble

Serious question, if you do most logic in the frontend then where do you do the server side input validation and where do you do the business logic? If I fumble around with your client side code and you don't check that then I could theoretically do whatever I want in your database.