Do not rely on Javascript to validate ANYTHING. Any user with firebug can bypass your javascript and go straight to the backend script. If you use Javascript to validate, use it as a convenience to the user, then implement the same email regex validation with your back-end script.