sanitize_email( string $email ): string

3760function sanitize_email( $email ) {3761	// Test for the minimum length the email can be.3762	if ( strlen( $email ) < 6 ) {3763		/**3764		 * Filters a sanitized email address.3765		 *3766		 * This filter is evaluated under several contexts, including 'email_too_short',3767		 * 'email_no_at', 'local_invalid_chars', 'domain_period_sequence', 'domain_period_limits',3768		 * 'domain_no_periods', 'domain_no_valid_subs', or no context.3769		 *3770		 * @since 2.8.03771		 *3772		 * @param string $sanitized_email The sanitized email address.3773		 * @param string $email           The email address, as provided to sanitize_email().3774		 * @param string|null $message    A message to pass to the user. null if email is sanitized.3775		 */3776		return apply_filters( 'sanitize_email', '', $email, 'email_too_short' );3777	}3778 3779	// Test for an @ character after the first position.3780	if ( false === strpos( $email, '@', 1 ) ) {3781		/** This filter is documented in wp-includes/formatting.php */3782		return apply_filters( 'sanitize_email', '', $email, 'email_no_at' );3783	}3784 3785	// Split out the local and domain parts.3786	list( $local, $domain ) = explode( '@', $email, 2 );3787 3788	/*3789	 * LOCAL PART3790	 * Test for invalid characters.3791	 */3792	$local = preg_replace( '/[^a-zA-Z0-9!#$%&\'*+\/=?^_`{|}~\.-]/', '', $local );3793	if ( '' === $local ) {3794		/** This filter is documented in wp-includes/formatting.php */3795		return apply_filters( 'sanitize_email', '', $email, 'local_invalid_chars' );3796	}3797 3798	/*3799	 * DOMAIN PART3800	 * Test for sequences of periods.3801	 */3802	$domain = preg_replace( '/\.{2,}/', '', $domain );3803	if ( '' === $domain ) {3804		/** This filter is documented in wp-includes/formatting.php */3805		return apply_filters( 'sanitize_email', '', $email, 'domain_period_sequence' );3806	}3807 3808	// Test for leading and trailing periods and whitespace.3809	$domain = trim( $domain, " \t\n\r\0\x0B." );3810	if ( '' === $domain ) {3811		/** This filter is documented in wp-includes/formatting.php */3812		return apply_filters( 'sanitize_email', '', $email, 'domain_period_limits' );3813	}3814 3815	// Split the domain into subs.3816	$subs = explode( '.', $domain );3817 3818	// Assume the domain will have at least two subs.3819	if ( 2 > count( $subs ) ) {3820		/** This filter is documented in wp-includes/formatting.php */3821		return apply_filters( 'sanitize_email', '', $email, 'domain_no_periods' );3822	}3823 3824	// Create an array that will contain valid subs.3825	$new_subs = array();3826 3827	// Loop through each sub.3828	foreach ( $subs as $sub ) {3829		// Test for leading and trailing hyphens.3830		$sub = trim( $sub, " \t\n\r\0\x0B-" );3831 3832		// Test for invalid characters.3833		$sub = preg_replace( '/[^a-z0-9-]+/i', '', $sub );3834 3835		// If there's anything left, add it to the valid subs.3836		if ( '' !== $sub ) {3837			$new_subs[] = $sub;3838		}3839	}
When	Instructions	Calls it makes
always	11–15	`apply_filters()`
always	28–37	`explode(), apply_filters()`
`$local !== "" && $domain !== ""`	45–56	`explode(), explode(), apply_filters()`
PHP	Compiled	Executed	Branches	Notes
8.6-dev	115	11–56	10
8.5	115	11–56	10
8.4	115	11–56	10	21 fewer instructions than PHP 8.3
8.3	136	11–71	10
8.2	136	11–71	10
8.1	136	11–71	10
7.4	136	11–71	10