Server-side validation is always appropriate, but client-side validation is often (and certainly in this case) worth having as well. I think limiting the numbe

Server-side validation is always appropriate, but client-side validation is often (and certainly in this case) worth having as well. I think limiting the number of characters is a good solution when Javascript isn't available, but warning the user that their input is too long is a more friendly solution where possible.