What is the alternative of $_SERVER['PHP_SELF']?

Question

My current address is: http://localhost/bookstore/bookedit.php?book_id=12

The $_SERVER['PHP_SELF'] variable is a string '/bookstore/bookedit.php',

But I would like to get the string 'bookedit.php?book_id=12',

Do we have any function or variable can do this?

Thanks!

Note that [PHP_SELF is vulnerable to XSS](http://stackoverflow.com/questions/6080022/php-self-and-xss), `$_SERVER['SCRIPT_NAME']` is a more secure alternative. — Fabian Schmengler, Mar 22 '13 at 15:00
Following link contains all the information you need... http://php.net/manual/en/reserved.variables.server.php — Populus, Mar 22 '13 at 14:58

score 4 · Accepted Answer · answered Mar 22 '13 at 14:56

4

If you do a var_dump($_SERVER) you will see all of the server variables you have available to you

$_SERVER['PHP_SELF'] . '?' . $_SERVER['QUERY_STRING'];

answered Mar 22 '13 at 14:56

John Conde

wow, thanks for mentioning var_dump($_SERVER), first time to hear about it, it is very useful for the beginner like me! – Eathen Nutt Mar 22 '13 at 15:00

score 1 · Answer 2 · answered Mar 22 '13 at 15:00

1

You can use the Request URI variable.

$_SERVER['REQUEST_URI']

answered Mar 22 '13 at 15:00

Jared

This will also return the path, i.e. `/bookstore`. – Danny Beckett Mar 24 '13 at 05:48

score 0 · Answer 3 · answered Mar 22 '13 at 15:29

0

$data = basename($_SERVER['PHP_SELF']);
$data .= $_SERVER['QUERY_STRING'] ? '?' . $_SERVER['QUERY_STRING'] : '';

answered Mar 22 '13 at 15:29

sean662

3 Answers3