From 024d88e3c46b8a5b60dc1586d1dbdb3c758cea55 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 15 Dec 2025 14:37:35 +0000
Subject: [PATCH] Add error handling for idn_to_ascii in mta-sts.php

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>
---
 data/web/mta-sts.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/data/web/mta-sts.php b/data/web/mta-sts.php
index 88f794d6b..007d82779 100644
--- a/data/web/mta-sts.php
+++ b/data/web/mta-sts.php
@@ -9,6 +9,12 @@ if (!isset($_SERVER['HTTP_HOST']) || strpos($_SERVER['HTTP_HOST'], 'mta-sts.') !
 $host = preg_replace('/:[0-9]+$/', '', $_SERVER['HTTP_HOST']);
 $domain = idn_to_ascii(strtolower(str_replace('mta-sts.', '', $host)), 0, INTL_IDNA_VARIANT_UTS46);
 
+// Validate domain or return 404 on error
+if ($domain === false || empty($domain)) {
+  http_response_code(404);
+  exit;
+}
+
 // Check if domain is an alias domain and resolve to target domain
 $stmt = $pdo->prepare("SELECT `target_domain` FROM `alias_domain` WHERE `alias_domain` = :domain");
 $stmt->execute(array(':domain' => $domain));