form-validation.txt
Here is my form: <paste the markup>

Add validation on both sides:
- In the browser, for fast feedback. Messages next to the field,
  announced to screen readers, not just red borders.
- On the server, treating every submitted value as hostile. This is
  the one that actually protects me.

For each field, tell me the rule you applied and what a user sees when
they break it. Do not use an alert() anywhere.

Browser validation is a courtesy to honest users. Server validation is the only kind that stops anyone. You need both and they are not the same code.