There's a comparison ``` if (strpos($message['sender'], $address)) { ``` on line 196 without checking for `false`.