The [A-Z0-9] part of the expression matches any letter or any number. And it's followed by an asterisk "*", which means zero or more instances. So "1B3" and "K4R" both match at that point in the pattern.

To use upper case only, remove the trailing "i" from the initial $formget assignment.