All forms should have input validation before you do things like try and store it or god forbid process it inside code. Instead of regex a better move might be

All forms should have input validation before you do things like try and store it or god forbid process it inside code. Instead of regex a better move might be using a forms validation library that works well and is actively maintained.