strpos breaks validation for 3 chars subdomains

Because of the way strpos works, checking if position is 0 may also match when strpos returns false, unless using ===.

See: https://www.php.net/manual/en/function.strpos.php https://www.php.net/manual/en/language.operators.comparison.php