This question already has answers here:Should I sanitize an email address before passing it to the is_email() function?(