Note, even validation libraries get it pretty wrong. Email validation, for example can get pretty dicey, and often best to split on '@' and do some initial checks (no spaces, length, etc) beyond this before proceeding.