I'm currently working on some very basic validation for a form that posts a bunch of information from a web form to an SQL database with a simple PHP script. The PHP script is working fine, and the values are being posted to the database, however the validation I have written appears to be ignored. I've attempted to fix it for a while now and can't see any glaring mistakes, but apologies if it's anything trivial.
HTML:
<form name = "registerForm" method = "POST" onsubmit = "return ValidateRegistration()" action = "createUser.php">
<p class = "register">Desired Username*</p>
<p class = "registerDesc">Between 1 and 20 characters long</p>
<input type = "text" name = "username" class = "register">
<p class = "register">Desired Password*</p>
<p class = "registerDesc">We won't force securty onto you; between 6 and 255 characters long. No other criteria.</p>
<input type = "password" name = "password" class = "register">
<p class = "register">Confirm Password*</p>
<input type = "password" name = "confirmPassword" class = "register">
<p class = "register">Email Adress*</p>
<input type = "text" name = "email" class = "registerEmail">
<p class = "register">Bio</p>
<p class = "registerDesc">Extra information such as hobbies, occupation, background information. Maximum 4096 characters. We can do this later.</p>
<textarea name = "bio" class = "registerBio"></textarea>
<p><input type = "submit" class = "registerButton" value = "Register"></p>
</form>
JavaScript:
function ValidateRegistration()
{
//username block
var username=document.forms["registerForm"]["username"].value;
if (username==null || username==" ")
{
alert("You must provide a username");
return false;
}
if (username.length>20 || username.length<1)
{
alert("Sorry, your username must be between 1 and 20 characters long.");
return false;
}
//etc....
}