How to prevent host header attack in Laravel

• Prevent host header attack using PHP script in Laravel

  $allowed_host = array('www.w3codegenerator.com');
  
  if (!isset($_SERVER['HTTP_HOST']) || !in_array($_SERVER['HTTP_HOST'], $allowed_host)) 
  {
      header($_SERVER['SERVER_PROTOCOL'] . ' 400 Bad Request');
      exit;
  }
  

  Place this code snippet in boot method of AppServiceProvider class in app\Providers\AppServiceProvider.php. You have to change the domain name as per your requirments in $allowed_host array. Different format for your domains could be like : www.w3codegenerator.com, w3codegenerator.com , subdomain.w3codegenerator.com

Back to code snippet queries related laravel