How to Get the Full Current URL in PHP

By the end of this page, you will understand how PHP builds the current request URL, why $_SERVER['PHP_SELF'] can be misleading with rewritten routes, and how to reliably get the full browser-visible URL using the correct server variables.

In PHP, the current URL is usually reconstructed from values in the $_SERVER superglobal. The important detail is that not all server variables represent the same thing.

For example:

• $_SERVER['PHP_SELF'] often points to the executing script path.
• $_SERVER['REQUEST_URI'] contains the path and query string that the browser actually requested.
• $_SERVER['HTTP_HOST'] contains the requested host name.
• $_SERVER['HTTPS'] helps determine whether the request used http or https.

This matters because URL rewriting tools such as Apache .htaccess rules can map a friendly URL like:

/products/42

to a real server file such as:

/index.php?id=42

If you use PHP_SELF, you may get the script path instead of the URL the user typed or clicked. If you want the browser-visible URL, REQUEST_URI is usually the correct choice.

A common way to build the full URL is:

 = (([]) && [] !==  ?  : )
    .  . [] . [];

Think of a web request like a package delivery label:

• HTTP_HOST is the building name.
• REQUEST_URI is the apartment number and any delivery instructions.
• PHP_SELF is the internal office room where the package was actually processed.

If you want to know what the visitor asked for, use the delivery label they wrote: REQUEST_URI.

If you want to know which PHP file handled it internally, use something like PHP_SELF.

With URL rewriting, those two can be different.

The most common beginner-friendly approach is:

<?php
$scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
$url = $scheme . '://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];

echo $url;

Example

If the browser shows:

https://example.com/blog/php?sort=new

then the variables are commonly like this:

• $_SERVER['HTTPS'] -> on
• $_SERVER['HTTP_HOST'] -> example.com
• $_SERVER['REQUEST_URI'] -> /blog/php?sort=new

So the final result becomes:

Consider this code:

<?php
$scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
$host = $_SERVER['HTTP_HOST'];
$uri = $_SERVER['REQUEST_URI'];
$currentUrl = $scheme . '://' . $host . $uri;

echo $currentUrl;

Assume the browser requested:

https://shop.example.com/products/15?page=2

Step-by-step

1. PHP checks $_SERVER['HTTPS'].

   • It is set and not equal to 'off'.
   • So $scheme becomes 'https'.

2. PHP reads $_SERVER['HTTP_HOST'].

Getting the full current URL is useful in many real applications:

• Redirect back after login

  • Store the current page so users return to it after authenticating.

• Canonical URL generation

  • Build the preferred page URL for SEO.

• Analytics and logging

  • Save the exact requested URL for debugging or traffic reports.

• Sharing links

  • Generate a copyable link to the current page.

• Pagination and filters

  • Preserve the current path and query string when building navigation links.

• Error reporting

  • Include the exact request URL in logs when something fails.

Example logging use:

<?php
error_log('User visited: ' . getCurrentUrl());

In real projects, developers usually do not build URLs inline everywhere. Instead, they wrap the logic in a helper function or service.

Common patterns include:

Guard clauses for missing values

<?php
function getCurrentUrl(): string
{
    if (empty($_SERVER['HTTP_HOST']) || empty($_SERVER['REQUEST_URI'])) {
        return '';
    }

    $scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
    return $scheme . '://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
}

Validation before redirects

Developers often use the current URL as a return_url, but validate it first to avoid unsafe redirects.

 = ();

 ( !== ) {
    [] = ;
}

1. Using PHP_SELF for the visible URL

Broken example:

<?php
$url = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF'];

Why it is a problem:

• PHP_SELF may point to the executing script.
• It may not match the rewritten route the user sees.

Use this instead:

<?php
$url = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];

2. Hardcoding http

Broken example:

<?php
$url = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];

Why it is a problem:

• It gives the wrong result on HTTPS pages.

$scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
$fullUrl = $scheme . '://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];

Quick rules

• Use REQUEST_URI for the browser-requested path.
• Do not use PHP_SELF if URL rewriting is involved.
• Use HTTPS to detect http vs https.
• Use HTTP_HOST for the domain part.
• REQUEST_URI usually includes the query string.

Common variables

• $_SERVER['HTTP_HOST'] -> host/domain
• $_SERVER['REQUEST_URI'] -> path + query string
• $_SERVER['PHP_SELF'] -> executing script path

How do I get the current full URL in PHP?

Use HTTP_HOST, REQUEST_URI, and the request scheme:

$scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
$url = $scheme . '://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];

Why is $_SERVER['PHP_SELF'] not giving the visible URL?

PHP_SELF usually points to the script being executed on the server, not the rewritten or friendly URL requested by the browser.

Does REQUEST_URI include the query string?

Yes, it usually includes both the path and the query string, such as /products?page=2.

How do I detect HTTPS in PHP?

A common check is:

!empty($_SERVER[]) && [] !== 

• $_SERVER superglobal - The full URL is built from server request variables.
• REQUEST_URI - This is the key variable for the browser-visible path.
• PHP_SELF - Often confused with the current URL, so it is closely related.
• URL rewriting - Explains why the visible URL can differ from the real script path.
• Query strings - Important because they are often part of the full current URL.
• HTTP vs HTTPS - Needed to build the correct scheme.
• Redirects in PHP - Often use the current URL as a return destination.
• Output escaping - Important when printing URLs into HTML safely.