Creating a Domain specific API

Question

I'm building an API in PHP. I want the user to only be able to use the public and private keys per domain, (as eventualy I would like to try to be able to charge for large requests). Is there any way to tell if the request is being sent from the correct domain?

regards

@Wesley van Opdorp meta.stackexchange.com/questions/103777/… — Layke
– Layke, Commented Aug 31, 2011 at 14:08
You can look at the source IP of the requests, but given how easy it is to set up a proxy servers, nat gateways, etc... an IP appearing to be from the correct place means essentially nothing. — Marc B
– Marc B, Commented Aug 31, 2011 at 14:09
@ Layke - thank you, that is correct, I accept answers when I feel I have been answered (correctly that is)! — Phil Jackson
– Phil Jackson, Commented Aug 31, 2011 at 14:21

Luchian Grigore · Accepted Answer · 2011-08-31 14:14:03Z

1

Check out the global $_SERVER variable

http://php.net/manual/en/reserved.variables.server.php

You can get the domain name the request is sent from with

$_SERVER['REMOTE_HOST']

answered Aug 31, 2011 at 14:14

Luchian Grigore

260k68 gold badges465 silver badges634 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

nikc.org Over a year ago

That is incorrect. Straight from the docs, $_SERVER['SERVER_NAME'] contains "The name of the server host under which the current script is executing. If the script is running on a virtual host, this will be the value defined for that virtual host."

Phil Jackson Over a year ago

Can this be altered and changed?

Luchian Grigore Over a year ago

Might want to take a look at this yiiframework.com/forum/index.php?/topic/…

nikc.org Over a year ago

The Host-header mentioned in the linked forum post, is bullshit. Not in the sense that it doesn't exist, but that it would have anything to do with the contents of $_SERVER['REMOTE_HOST']. It's sole purpose is to identify which host should receive the request, being useful for virtualhost setup. The contents of the sent header, if present, are found in $_SERVER['HTTP_HOST']

Collectives™ on Stack Overflow

Creating a Domain specific API

1 Answer 1

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related