How can preg_match be used to validate the format of a user-generated input in PHP?

When validating user-generated input in PHP, preg_match can be used to check if the input matches a specific format, such as an email address, phone number, or password criteria. This function allows you to define a regular expression pattern that the input must adhere to in order to be considered valid. By using preg_match, you can ensure that the user input meets the required format before processing it further in your application.

$user_input = $_POST['user_input']; // Assuming user input is submitted via POST method

// Define the regular expression pattern to validate the user input (e.g. email format)
$pattern = "/^\w+([\.-]?\w+)*@\w+([\.-]?\w+)*(\.\w{2,3})+$/";

// Use preg_match to check if the user input matches the defined pattern
if (preg_match($pattern, $user_input)) {
    // Input is valid, proceed with further processing
    echo "Input is valid!";
} else {
    // Input is not in the correct format
    echo "Invalid input format. Please enter a valid email address.";
}