Comment by nwh

Some very basic client side validation would be your friend. Just check for the existence of an @ symbol, at least.