title: Does FILTER_VALIDATE_EMAIL make a string safe for insertion in database?
body: <pre><code>$str = '"mynam@blabl"@domanin.com';
  
  filter_var($str, FILTER_VALIDATE_EMAIL);//return valid email.
  </code></pre>
  
  <p>the above email returns true... Fair enough that RFC 2822 says it's a legal email address.</p>
  
  <p>my question is if you validate an email using the above could an email carry sql injections that can harm the db even though you have filtered it with filter_var?</p>