There are two reasons. First, you will probably have the same business logic for multiple clients, so it makes sense to talk about it on the server. Secondly, you most likely cannot trust the client, which means that server validation is important.
source
share