From 2dff2f9b10ef6423efd3fe5d94d9ede4de44347e Mon Sep 17 00:00:00 2001
From: Pinga <121483313+getpinga@users.noreply.github.com>
Date: Fri, 2 May 2025 12:16:31 +0300
Subject: [PATCH] EPP check improvements

---
 epp/src/epp-check.php | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/epp/src/epp-check.php b/epp/src/epp-check.php
index b7968ee..3ecd86e 100644
--- a/epp/src/epp-check.php
+++ b/epp/src/epp-check.php
@@ -76,7 +76,12 @@ function processHostCheck($conn, $db, $xml, $trans) {
     foreach ($hosts as $host) {
         $host = (string)$host;
 
-        if (preg_match('/^\.[a-z]{2,}$/i', $host) || preg_match('/^[a-z]{2,}$/i', $host)) {
+        if (
+            strpos($host, '.') === false ||                         // No dot = not FQDN
+            preg_match('/^\./', $host) ||                           // Starts with dot
+            preg_match('/^-/', $host) ||                            // Starts with dash
+            preg_match('/[^\w.-]/', $host)                          // Invalid characters
+        ) {
             sendEppError($conn, $db, 2306, 'Host name must be fully qualified (FQDN)', $clTRID, $trans);
             return;
         }