Validate that email addresses contain only allowed 
characters before using them to send mail. 
 
Consider adding a detector that verifies this stuff at data 
entry time.