Javascript Runat = Server

Hi,

I wanted to validate a form before submission, so I added client-side js. At
 the server, I used ASP to store the data into a DB. This was working great,
 until I realized that if somebody disabled js, they could store gibberish (
or worse) into the DB. I could, of course re-validate ALL the data (it's a b
ig form) at the server, but isn't there a better way?

I was wondering if I could just add the runat=server tag to my js, but the p
roblem is, then it will not execute with the page's onchange, onclick, etc.,
 events, right? 

What is the best solution?

Thanks a lot in advance.