$_SERVER['HTTP_HOST'] contains port number too =/

Question

I don't know maybe it's a bug.

I have 2 virutalhosts on my server.

virtualhost1.com virtualhost2.com

if i open virtualhost1.com with port 80 (virtualhost1.com:80)

$_SERVER['HTTP_HOST']='virtualhost1.com';

but if i open virtualhost2.com:80

$_SERVER['HTTP_HOST']='virtualhost2.com:80'; // NOTE: with port number

Can I know why?

And I suggest rtfm http://php.net/manual/en/reserved.variables.server.php — dev-null-dweller, Dec 21 '10 at 23:24

webbiedave · Accepted Answer · 2015-12-21T22:42:09.900

21

The value of $_SERVER['HTTP_HOST'] is taken directly from the Host: HTTP request header. It appears the requesting client is filling it in that way.

I suggest using $_SERVER['SERVER_NAME'] instead as its value will be set from your virtual host config. However, as Flimm notes below, even the reliability of SERVER_NAME can still be dependent on server config (check out this answer for more info on that).

edited Dec 21 '15 at 22:42

answered Dec 21 '10 at 23:21

webbiedave

47,388
8
87
99

Note that it's a bit more complicated than that, `$_SERVER['SERVER_NAME']` can't always be trusted. [See this question](https://stackoverflow.com/questions/2297403/http-host-vs-server-name) – Flimm Nov 13 '15 at 10:25

score 2 · Answer 2 · answered May 20 '16 at 13:17

2

Following function always return real host (user typed host) without port and it's almost reliable:

function getRealHost(){
   list($realHost,)=explode(':',$_SERVER['HTTP_HOST']);
   return $realHost;
}

answered May 20 '16 at 13:17

MSS

3,247
23
27

Just `return strstr($_SERVER['HTTP_HOST'], ':', true);` – Lawrence Cherone Jul 04 '18 at 23:04
1

@lawrence-cherone this will return an empty string if no ':' character is found. It's better to use `strtok($_SERVER['HTTP_HOST'], ':');` – Quinn Comendant May 03 '19 at 00:16

$_SERVER['HTTP_HOST'] contains port number too =/

2 Answers2