Host Header Validation in PHP - Treat the Request Authority as Input, Not Configuration
A small PHP application sometimes needs its own public address. It may build a password-reset link, produce a canonical URL, or redirect a visitor to the HTTPS version of a page. The convenient shortcut is to prepend a …
Read article