This regexp
[^ @]*@[^ @]*
will validate strings like `@example.com` and `joe@` and even a single `@`. Probably [^ @]+@[^ @]+
is what he wants, plus server side validation (that is the classic "click link to validate address" email).