Validating email string without using sp_OACreate in T-SQL

I wanted a way to validate that an email address in a SQL query was well-formed, and found a lot of resources suggesting to create a scalar function that invokes sp_OACreate among others, and return a bit indicating if it was valid or not.  That works great, but not for those of us in heightened security environments, where granting execute permissions to system stored procs and functions is not permitted.  After searching around I came up with the following function:

CREATE FUNCTION [dbo].[checkEmail]
@source nvarchar(5000)
DECLARE @results bit = 1
IF (SELECT PATINDEX('%_@__%.__%', @source)) = 0
SET @results = 0

This will allow you to pass in a single string, and the return value will be whether or not it’s a good address. For example,

checkEmail(‘’) will return a 1
checkEmail(‘someone@someplace’) will return a 0

Of course, this isn’t a solution for validating actual domains or if an email address is truly active.  But this will filter out 99% of the mis-keyed data, and ensure it’s well-formed.

Hope this helps someone!


Eric Oszakiewski is a professional software developer based in Scottsdale, AZ with over 35 years of IT experience, and 19 years Native American Gaming experience. He is currently working as a Sr .Net/SharePoint Developer for General Motors, and also as a consultant.

More Posts - Website

Follow Me:
TwitterFacebookLinkedInGoogle PlusYouTube