Use CURLOPT_HEADEROPT to make the headers only get sent to where you intend them to get sent.Ĭustom headers are sent in all requests done by the easy handle, which implies that if you tell libcurl to follow redirects ( CURLOPT_FOLLOWLOCATION), the same set of custom headers is sent in the subsequent request. They may be private or otherwise sensitive to leak.
You should therefore use this option with caution if you for example connect to the remote site using a proxy and a CONNECT request, you should to consider if that proxy is supposed to also get the headers. Security concernsīy default, this option makes libcurl send the given headers in all HTTP requests done by this handle. These are "From:", "To:", "Date:" and "Subject:" among others and their presence and value is generally checked by anti-spam utilities. Other specific headers that do not have a libcurl default value but are strongly desired by mail delivery and user agents should also be included. In all cases the value must be of the form "multipart/*" to respect the document structure and may not include the "boundary=" parameter. When a MIME mail is only composed of alternative representations of the same data (i.e.: HTML and plain text), this header must be set to "multipart/alternative". By default, libcurl sets it to "multipart/mixed", describing a document made of independent parts. Indicates the document's global structure type. It defaults to "1.0" and should normally not be altered.
#Php curl header how to
Tells the parser at the receiving site how to interpret the MIME framing. When used to build a MIME e-mail for IMAP or SMTP, the following document-level headers can be set to override libcurl-generated values: Tells libcurl the upload is to be done using this chunked encoding instead of providing the Content-Length: field in the request. If the request is done over HTTP/2 or HTTP/3, the custom host name is instead used in the ":authority" header field and Host: is not sent at all over the wire. The specified host name is used for cookie matching if the cookie engine is also enabled for this transfer. Setting some specific headers causes libcurl to act differently. Use CURLOPT_HEADEROPT to control the behavior. There is an alternative option that sets or replaces headers only for requests that are sent with CONNECT to a proxy: CURLOPT_PROXYHEADER. The most commonly replaced HTTP headers have "shortcuts" in the options CURLOPT_COOKIE, CURLOPT_USERAGENT and CURLOPT_REFERER. Pass a NULL to this option to reset back to no custom headers. When this option is passed to curl_easy_setopt, libcurl does not copy the entire list so you must keep it around until you no longer use this handle for a transfer before you call curl_slist_free_all on the list. Use CURLOPT_CUSTOMREQUEST to change the method. Adding this method line in this list of headers only causes your request to send an invalid header. Only the lines following the request-line are headers.
The first line in an HTTP request (containing the method, usually a GET or POST) is not a header and cannot be replaced using this option. Failure to comply with this might result in strange behavior. The headers included in the linked list must not be CRLF-terminated, because libcurl adds CRLF after each header item itself. To add a header with no content (nothing to the right side of the colon), use the form 'name ' (note the ending semicolon). With this option you can add new headers, replace internal headers and remove internal headers. If you add a header with no content as in 'Accept:' (no data on the right side of the colon), the internally used header is disabled/removed. If you add a header that is otherwise generated and used by libcurl internally, your added header is used instead. Use curl_slist_append to create the list and curl_slist_free_all to clean up an entire list. The linked list should be a fully valid list of struct curl_slist structs properly filled in. When used within an IMAP or SMTP request to upload a MIME mail, the given header list establishes the document-level MIME headers to prepend to the uploaded document described by CURLOPT_MIMEPOST. The same list can be used for both host and proxy requests! Pass a pointer to a linked list of HTTP headers to pass to the server and/or proxy in your HTTP request. CURLOPT_HTTPHEADER - set of HTTP headers SynopsisĬURLcode curl_easy_setopt(CURL *handle, CURLOPT_HTTPHEADER,
0 kommentar(er)
