CODEWITHSUNDEEP
php
Zera42
Zera42

Reputation: 2692

PHP how to get the base domain/url?

function url(){
    if(isset($_SERVER['HTTPS'])){
        $protocol = ($_SERVER['HTTPS'] && $_SERVER['HTTPS'] != "off") ? "https" : "http";
    }
    else{
        $protocol = 'http';
    }
    return $protocol . "://" . $_SERVER['HTTP_HOST'];
}

For example with the function above, it works fine if I work with the same directory, but if I make a sub directory, and work in it, it will give me the location of the sub directory also for example. I just want example.com but it gives me example.com/sub if I'm working in the folder sub. If I'm using the main directory,the function works fine. Is there an alternative to $_SERVER['HTTP_HOST']?

Or how could I fix my function/code to get the main url only? Thanks.

Upvotes: 83

Views: 307153

Answers (14)

jave.web
jave.web

Reputation: 15032

TL;DR

Specific http server (apache/nginx) config or whitelist of hosts & $_SERVER['SERVER_NAME'].

gethostname() ? only for non-virtual host...

https://www.php.net/manual/en/function.gethostname.php

gets the standard host name for the local machine.

... but if you're on a virtual host, this will still return the system host, not the virtual one :-( ...
(typically e.g. shared web hosting)

So what about $_SERVER['SERVER_NAME']?

https://www.php.net/manual/en/reserved.variables.server.php

Well, this on the other hand can be spoofed if not configured properly,
but it does return the virtual host if on virtual host.

Note: Under Apache 2, UseCanonicalName = On and ServerName must be set. Otherwise, this value reflects the hostname supplied by the client, which can be spoofed. It is not safe to rely on this value in security-dependent contexts.

Nginx => the same thing, docs just don't mention it.

Solution

Basically you have 2 options:

  1. If you can configure your http server, you can force it to be your value, not value from request, this differs per http server you use:

    • Apache: UseCanonicalName (to On) & ServerName directives have to be set - most likely in your <VirtualHost>
    • Nginx: you have to set the server_name directive in your server{} block.

  2. If you can't configure your server or can't rely on its setting, you can at least whitelist the allowed hostnames

<?php
    $allowedHosts = [
        'localhost',
        'example.com',
        'www.example.com',
    ];

    if (!\in_array($_SERVER['HTTP_HOST'], $allowedHosts)) {
        exit('You trynna spoof me?');
    }

Upvotes: 0

lookly Dev
lookly Dev

Reputation: 345

Use this code is whork :

if (!preg_match('#^http(s)?://#', $url)) {
         $url = 'http://' . $url;
}
$urlParts = parse_url($url);
$url = preg_replace('/^www\./', '', $urlParts['host']);

Upvotes: 2

Elron
Elron

Reputation: 1455

If you're using wordpress, use get_site_url:

get_site_url()

Upvotes: -3

Rudolph
Rudolph

Reputation: 149

This works fine if you want the http protocol also since it could be http or https. $domainURL = $_SERVER['REQUEST_SCHEME']."://".$_SERVER['SERVER_NAME'];

Upvotes: 2

Aasif khan
Aasif khan

Reputation: 171

/* Get sub domain or main domain url
 * $url is $_SERVER['SERVER_NAME']
 * $index int remove subdomain if acceess from sub domain my current url is https://support.abcd.com ("support" = 7 (char))
 * $subDomain string 
 * $issecure string https or http
 * return url
 * call like echo getUrl($_SERVER['SERVER_NAME'],7,"payment",true,false);
 * out put https://payment.abcd.com
 * second call echo getUrl($_SERVER['SERVER_NAME'],7,null,true,true);
*/
function getUrl($url,$index,$subDomain=null,$issecure=false,$www=true) {
  //$url=$_SERVER['SERVER_NAME']
  $protocol=($issecure==true) ?  "https://" : "http://";
  $url= substr($url,$index);
  $www =($www==true) ? "www": "";
  $url= empty($subDomain) ? $protocol.$url : 
  $protocol.$www.$subDomain.$url;
  return $url;
}

Upvotes: 3

Fadi
Fadi

Reputation: 307

2 lines to solve it

$actual_link = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http") . "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
$myDomain = preg_replace('/^www\./', '', parse_url($actual_link, PHP_URL_HOST));

Upvotes: 2

Oluwaseye
Oluwaseye

Reputation: 695

Tenary Operator helps keep it short and simple.

echo (isset($_SERVER['HTTPS']) ? 'http' : 'https' ). "://" . $_SERVER['SERVER_NAME']  ;

Upvotes: -1

Dibyendu Mitra Roy
Dibyendu Mitra Roy

Reputation: 1665

Step-1

First trim the trailing backslash (/) from the URL. For example, If the URL is http://www.google.com/ then the resultant URL will be http://www.google.com

$url= trim($url, '/');

Step-2

If scheme not included in the URL, then prepend it. So for example if the URL is www.google.com then the resultant URL will be http://www.google.com

if (!preg_match('#^http(s)?://#', $url)) {
    $url = 'http://' . $url;
}

Step-3

Get the parts of the URL. 

$urlParts = parse_url($url);

Step-4

Now remove www. from the URL

$domain = preg_replace('/^www\./', '', $urlParts['host']);

Your final domain without http and www is now stored in $domain variable.

Examples:

http://www.google.com => google.com

https://www.google.com => google.com

www.google.com => google.com

http://google.com => google.com

Upvotes: 7

barbushin
barbushin

Reputation: 5305

Shortest solution:

$domain = parse_url('http://google.com', PHP_URL_HOST);

Upvotes: 43

Jasmeen
Jasmeen

Reputation: 906

/**
 * Suppose, you are browsing in your localhost 
 * http://localhost/myproject/index.php?id=8
 */
function getBaseUrl() 
{
    // output: /myproject/index.php
    $currentPath = $_SERVER['PHP_SELF']; 

    // output: Array ( [dirname] => /myproject [basename] => index.php [extension] => php [filename] => index ) 
    $pathInfo = pathinfo($currentPath); 

    // output: localhost
    $hostName = $_SERVER['HTTP_HOST']; 

    // output: http://
    $protocol = strtolower(substr($_SERVER["SERVER_PROTOCOL"],0,5))=='https'?'https':'http';

    // return: http://localhost/myproject/
    return $protocol.'://'.$hostName.$pathInfo['dirname']."/";
}

Upvotes: 31

Charles
Charles

Reputation: 320

Please try this:

$uri = $_SERVER['REQUEST_URI']; // $uri == example.com/sub
$exploded_uri = explode('/', $uri); //$exploded_uri == array('example.com','sub')
$domain_name = $exploded_uri[1]; //$domain_name = 'example.com'

I hope this will help you.

Upvotes: 0

Get Off My Lawn
Get Off My Lawn

Reputation: 36299

Use parse_url() like this:

function url(){
    if(isset($_SERVER['HTTPS'])){
        $protocol = ($_SERVER['HTTPS'] && $_SERVER['HTTPS'] != "off") ? "https" : "http";
    }
    else{
        $protocol = 'http';
    }
    return $protocol . "://" . parse_url($_SERVER['REQUEST_URI'], PHP_URL_HOST);
}

Here is another shorter option:

function url(){
    $pu = parse_url($_SERVER['REQUEST_URI']);
    return $pu["scheme"] . "://" . $pu["host"];
}

Upvotes: 11

Bad Wolf
Bad Wolf

Reputation: 8349

Use SERVER_NAME.

echo $_SERVER['SERVER_NAME']; //Outputs www.example.com

Upvotes: 122

user1864610
user1864610

Reputation:

You could use PHP's parse_url() function

function url($url) {
  $result = parse_url($url);
  return $result['scheme']."://".$result['host'];
}

Upvotes: 59

Related Questions