What are some potential pitfalls when using $_SERVER['REQUEST_URI'] to determine the current webpage in PHP?

One potential pitfall when using $_SERVER['REQUEST_URI'] is that it may not always return the expected value due to server configurations or URL rewriting. To ensure accuracy, it is recommended to use a combination of $_SERVER['REQUEST_URI'] and $_SERVER['SCRIPT_NAME'] to determine the current webpage. 

$current_page = $_SERVER['SCRIPT_NAME'];
if(isset($_SERVER['REQUEST_URI'])){
    $request_uri = $_SERVER['REQUEST_URI'];
    if(strpos($request_uri, '?') !== false){
        $request_uri = substr($request_uri, 0, strpos($request_uri, '?'));
    }
    $current_page = $request_uri;
}
echo $current_page;

Keywords

$_SERVER['REQUEST_URI'] PHP security URL manipulation vulnerability

Related Questions