[a0zU]

I understand why maxlength would be appealing but it takes the hacking skills of a fourth grader to change it in the browser's html and submitting any number that they'd like.

[boomlinde]

So? That is true for either client side option, which is why you need server side validation as well.