"Enter card number, no spaces or dashes" is the mark of a shit programmer. Seriously? str.replace(/[\s-]/g, '') was too hard for ya, eh?