Difference between $_SERVER['DOCUMENT_ROOT'] and $_SERVER['HTTP_HOST']

Question

I am back with a simple question (or related question).

The question is simple however I have not received an answer yet. I have asked many people with different experience in PHP. But the response I get is: "I don't have any idea. I've never thought about that." Using Google I have not been able to find any article on this. I hope that I will get a satisfying answer here.

So the question is:

What is the difference between $_SERVER['DOCUMENT_ROOT'] and $_SERVER['HTTP_HOST'] ?

Are there any advantages of one over the other?

Where should we use HTTP_HOST & where to use DOCUMENT_ROOT?

Did you try the [documentation for `$_SERVER`](http://www.php.net/reserved.variables.server.php)? — outis, Aug 29 '11 at 12:04
I dont need to do that...I know what each thing means, but if one using document_root & other using http_host while defining paths, so wat will be the difference between the paths? Which is more used/reliable/where to use what?? as application runs using both. But still there should b sumthng that both are present. — Aakash Sahai, Aug 29 '11 at 12:57
Your questions show you don't seem to know what each means. Each holds different information. You're asking for a comparison between apples and oranges. Would you ask "What's the difference between a street address and a phone number?", or where you would use each? — outis, Aug 29 '11 at 13:04
k i got u. but if these things are different then y it works similar for `Case 1 : header('Location: '. $_SERVER['DOCUMENT_ROOT'] . '/abc.php') Case 2: header('Location: '. $_SERVER['HTTP_HOST'] . '/abc.php')`....as u ol trying to say these are different, i know these are different by definition, but there r working same... — Aakash Sahai, Aug 29 '11 at 13:09
No, no they don't. Neither should work in that context, as neither is a valid absolute URI. The document root is a local path and doesn't have any meaning in URIs. The latter is missing the URI scheme and '//'. — outis, Aug 29 '11 at 13:10
**What is the difference between `$_SERVER['DOCUMENT_ROOT']` and `$_SERVER['CONTEXT_DOCUMENT_ROOT']`?** — Neocortex, Dec 04 '14 at 12:21

John Ledbetter · Accepted Answer · 2011-08-29T15:10:47.497

DOCUMENT_ROOT

The root directory of this site defined by the 'DocumentRoot' directive in the General Section or a section e.g.

DOCUMENT_ROOT=/var/www/example

HTTP_HOST

The base URL of the host e.g.

HTTP_HOST=www.example.com

The document root is the local path to your website, on your server; The http host is the hostname of the server. They are rather different; perhaps you can clarify your question?

Edit: You said:

Case 1 : header('Location: '. $_SERVER['DOCUMENT_ROOT'] . '/abc.php')

Case 2: header('Location: '. $_SERVER['HTTP_HOST'] . '/abc.php')

I suspect the first is only going to work if you run your browser on the same machine that's serving the pages.

Imagine if someone else visits your website, using their Windows machine. And your webserver tells them in the HTTP headers, "hey, actually, redirect this location: /var/www/example/abc.php." What do you expect the user's machine to do?

Now, if you're talking about something like

<?php include($_SERVER['DOCUMENT_ROOT'] . '/include/abc.php') ?>

vs

<?php include($_SERVER['HTTP_HOST'] . '/include/abc.php') ?>

That might make sense. I suspect in this case the former is probably preferred, although I am not a PHP Guru.

I think u all didn't get my point. I know what is document root and what http_host do...but i have used HTTP_HOST in all my project, but my senior said that u should use Document_root, it is more reliable. I asked him, so he told me search for it. Now I had only asked that y should I go for document root, instead of HTTP_HOST when defining path. — Aakash Sahai, Aug 29 '11 at 12:49

score 4 · Answer 2 · edited Jul 21 '18 at 14:11

4

<?php include($_SERVER['DOCUMENT_ROOT'] . '/include/abc.php') ?>

should be used for including the files in another file.

header('Location: '. $_SERVER['HTTP_HOST'] . '/abc.php')

should be used for hyperlinking

edited Jul 21 '18 at 14:11

dev_masta

901
8
16

answered Nov 13 '11 at 17:03

Adi

4,766
3
20
22

1

It's the other way around. – Pampy Aug 05 '16 at 13:27

score 3 · Answer 3 · answered Aug 29 '11 at 12:05

3

Eh, what's the question? DOCUMENT_ROOT contains the path to current web, in my case /home/www. HTTP_HOST contains testing.local, as it runs on local domain. The difference is obvious, isn't it?

I cannot figure out where you could interchange those two, so why should you consider advantages?

answered Aug 29 '11 at 12:05

nothrow

15,882
9
57
104

I think u all didn't get my point. I know what is document root and what http_host do...but i have used HTTP_HOST in all my project, but my senior said that u should use Document_root, it is more reliable. I asked him, so he told me search for it. Now I had only asked that y should I go for document root, instead of HTTP_HOST when defining path. – Aakash Sahai Aug 29 '11 at 12:50

J0HN · Answer 4 · 2011-08-29T12:10:23.797

3

HTTP_HOST will give you URL of the host, e.g. domain.com

DOCUMENT_ROOT will give you absolute path to document root of the website in server's file system, e.g. /var/www/domain/

Btw, have you tried looking at PHP's manual, specifically $_SERVER? Everything is explanied there.

edited Aug 29 '11 at 12:10

answered Aug 29 '11 at 12:05

J0HN

26,063
5
54
85

`HTTP_HOST` isn't a URL, it's just a (wait for it) host name. There's no 'http:' scheme. – outis Aug 29 '11 at 12:09
I think u all didn't get my point. I know what is document root and what http_host do...but i have used HTTP_HOST in all my project, but my senior said that u should use Document_root, it is more reliable. I asked him, so he told me search for it. Now I had only asked that y should I go for document root, instead of HTTP_HOST when defining path. – Aakash Sahai Aug 29 '11 at 12:51
3

This means that you or your senior does not understand what's the difference between them. Could you provide some code samples where you use `HTTP_HOST`? – J0HN Aug 29 '11 at 12:53
Case 1 : `header('Location: '. $_SERVER['DOCUMENT_ROOT'] . '/abc.php')` Case 2: `header('Location: '. $_SERVER['HTTP_HOST'] . '/abc.php')` – Aakash Sahai Aug 29 '11 at 13:01
2

Case 1 is incorrect. Case 2 is OK. If in your setup case 1 is working as expected - it's something strange. – J0HN Aug 29 '11 at 13:26

score 1 · Answer 5 · edited Feb 26 '18 at 09:14

1

if you want domain path like 'example.com', you can use "HTTP_HOST" if you want folder '/public_html/foldername/' path you can use "DOCUMENT_ROOT"

edited Feb 26 '18 at 09:14

David

33,444
11
80
118

answered Feb 26 '18 at 07:47

Suhasini

11
2

if you want folder and file path use document_root like public_html/folderpath/files if you want the url web path then use http_host like www.website.com – Suhasini Sep 08 '18 at 10:09

score 1 · Answer 6 · answered Sep 19 '19 at 16:21

$_SERVER ['HTTP_HOST'] is defined by the client and may not even be set! You can repeat a request and withhold the header for local testing in developer tools such as for Waterfox/Firefox. You must determine if this header is set and if the host being requested exists (one of the very first things you do, even before starting to send any of your headers) otherwise the appropriate action is to kill the entire process and respond with an HTTP 400 Bad Request. This goes for all server-side programming languages.

$_SERVER['DOCUMENT_ROOT'] is defined by the server as the directory which the executing script is located. Examples:

public_html/example.php = public_html/
public_html/test1/example.php = public_html/test1/

Keep in mind that if you're using Apache rewrites that there is a difference between the $_SERVER['REQUEST_URI'] (the URL requested) and $_SERVER['PHP_SELF'] (the file handling the request).

score 1 · Answer 7 · answered Feb 17 '20 at 15:16

The Title question is perfectly awnsered by John Ledbetter.

This awnser is intended to expand and offer additional information about what seems to be the original poster inner concerns:

Where would make sense to use the URL based location: $_SERVER['HTTP_HOST'] ?
Where would make sense to use the local based location: $_SERVER['DOCUMENT_ROOT'] ?
Where both can be used, what are the Advantages and Disadvantages of each one. ?

Following my awnsers:

By usign the HTTP_HOST you can abstract yourself from the machine Folder System which means in cases where portability is a concern and you are expected to install the Application on multiple servers potentially with diferent OS this approach could be easier to maintain.
You can also take advantage of HTTP_HOST if your server is going to become unavailible and you want a diferent one from the cluster to handle the request.
By Using the DOCUMENT_ROOT you can access the whole filesystem (depends on the permissions you give to php) it makes sense if you want to access a program which you dont want to be accesible from the web or when the Folder System is relevant to your Application.

You can also take advantage of DOCUMENT_ROOT to get the subsite root instead of the Host.

$_SERVER['HTTP_HOST'] = "www.example.com";
$_SERVER['DOCUMENT_ROOT'] = "var/www/domain/subsite1" // equivalent to www.example.com/subsite1

Tahridabbas · Answer 8 · 2018-11-22T15:45:01.860

0

$_SERVER ['HTTP_HOST'] returns the domain url a.g. www.example.com While $_SERVER['DOCUMENT_ROOT'] returns the roof of current web.. Such as

edited Nov 22 '18 at 15:45

answered Nov 22 '18 at 06:11

Tahridabbas

25
1
7

score 0 · Answer 9 · answered Dec 14 '20 at 20:37

Other answers have alluded to it, but I wanted to add an answer just to be sharp as a grizzly bear tooth in one point - don't trust $_SERVER['HTTP_HOST'] as safe where following code does:

<?php
header('Location: '. $_SERVER['HTTP_HOST'] . '/abc.php');
#Or 
include($_SERVER['HTTP_HOST'] . '/include/abc.php');
?>

The variable is subject to manipulation by the incoming request and could contribute to an exploit. This may depend on your server configuration, but you don't want something filling out this variable for you :)

Difference between $_SERVER['DOCUMENT_ROOT'] and $_SERVER['HTTP_HOST']

9 Answers9

Linked

Related