What are best practices for parsing and manipulating user input with regular expressions in PHP?

When parsing and manipulating user input with regular expressions in PHP, it is important to validate the input to prevent security vulnerabilities such as SQL injection or cross-site scripting attacks. One best practice is to use built-in PHP functions like `filter_var()` to sanitize and validate user input before applying regular expressions. Additionally, always use prepared statements when interacting with a database to prevent SQL injection attacks.

// Example of validating and sanitizing user input using regular expressions in PHP
$userInput = $_POST['input'];

// Validate and sanitize the user input
if (filter_var($userInput, FILTER_VALIDATE_EMAIL)) {
    // User input is a valid email address
    // Perform further operations with the input
} else {
    // Invalid input
    echo "Invalid email address";
}