You have a problem with your contact form.
A visitor can put whatever email and send you the message.
and email without @ or .com .net etc.. should display an error message.
you can have something like
code:
if (stristr($email,"@") === false OR stristr($email ,".") === false)
{
//message here
}
regards