Slight misreading there - it's actually:
. : matches any charactor except newline
+ : match the preceding charactor 1 or more times
? : match the preceding charactor zero or one times
Basically all that pattern does is check that there is a @ sign somewhere in the string!
If it's supposed to check email addresses (which I'm assuming it is) a better regexp would be:
[a-zA-Z0-9_-.]+@[a-zA-Z0-9-]+.[a-zA-Z]+.?[a-zA-Z]+$
This pattern requires the email address to have a combination of letters, numbers, fullstops, hyphens or underscores (username part) followed by an @ sign followed by more letters, numbers or hyphens (hostname part) followed by a fullstop then the domain (letters only) with an optional fullstop and more letters (to handle domains such as .co.uk)
Hope this helps