Indeed, you can perform validation both on client and on server. You can read about it here: Velo: About Validating User Input with Code | Help Center | Wix.com
A smart approach would be, as you wrote, not to rely solely on client validation but perform additional validations on the server side.