PHP中如何阻止cURL格式化URL字符串

在使用PHP cURL发起API请求时，请求无返回结果，通过curl_getinfo()排查发现整个URL的特殊字符（如/、?）被错误编码，导致请求无效。问题根源是对整个URL字符串使用了urlencode()函数——该函数虽能处理空格，但会破坏URL的结构，使服务器无法识别正确的请求路径和参数。

原错误代码 #

$apiQuery = 'api.server.com/v0/Accounts/USER/INSTRUMENT?channels=all&start=2022-10-30 21:00:00';

$headers = array(
    'Accept: application/json',
    'Content-Type: application/json',
);

$c = curl_init();
curl_setopt($c, CURLOPT_URL, urlencode($apiQuery));
curl_setopt($c, CURLOPT_HTTPHEADER, $headers);
curl_setopt($c, CURLOPT_HEADER, 0);
curl_setopt( $c , CURLOPT_RETURNTRANSFER, true);
curl_setopt( $c , CURLOPT_SSL_VERIFYPEER, false);
curl_setopt( $c , CURLOPT_SSL_VERIFYHOST, false);
curl_setopt( $c , CURLOPT_TIMEOUT, 50000); // 50 sec

$resultA = curl_exec($c);

print_r(curl_getinfo($c));

执行后curl_getinfo()返回结果 #

Array
(
    [url] => HTTP://api.server.com%2Fv0%2FAccounts%2FUSER%2FINSTRUMENT%3Fchannels%3Dall%26start%3D2022-10-30+21%3A00%3A00/
    [content_type] =>
    [http_code] => 0
    [header_size] => 0
    [request_size] => 0
    [filetime] => -1
    [ssl_verify_result] => 0
    [redirect_count] => 0
    [total_time] => 0
    [namelookup_time] => 0
    [connect_time] => 0
    [pretransfer_time] => 0
    [size_upload] => 0
    [size_download] => 0
    [speed_download] => 0
    [speed_upload] => 0
    [download_content_length] => -1
    [upload_content_length] => -1
    [starttransfer_time] => 0
    [redirect_time] => 0
    [redirect_url] =>
    [primary_ip] =>
    [certinfo] => Array
        (
        )

    [primary_port] => 0
    [local_ip] =>
    [local_port] => 0
)

正确解决方案 #

urlencode()仅适用于编码URL中的查询参数值，不能编码整个URL。正确做法是拆分URL结构，仅对参数值进行编码：

修复后的代码 #

// 拆分基础路径与查询参数
$baseUrl = 'api.server.com/v0/Accounts/USER/INSTRUMENT';
$params = [
    'channels' => 'all',
    'start' => '2022-10-30 21:00:00'
];

// 使用http_build_query自动处理参数编码，避免手动拼接错误
$queryString = http_build_query($params);
$fullUrl = $baseUrl . '?' . $queryString;

$headers = array(
    'Accept: application/json',
    'Content-Type: application/json',
);

$c = curl_init();
curl_setopt($c, CURLOPT_URL, $fullUrl);
curl_setopt($c, CURLOPT_HTTPHEADER, $headers);
curl_setopt($c, CURLOPT_HEADER, 0);
curl_setopt($c, CURLOPT_RETURNTRANSFER, true);
curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($c, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($c, CURLOPT_TIMEOUT, 50); // 修正单位：CURLOPT_TIMEOUT以秒为单位，原50000为无效值

$resultA = curl_exec($c);

// 添加错误排查逻辑
if (curl_errno($c)) {
    echo 'cURL错误信息：' . curl_error($c);
}

print_r(curl_getinfo($c));
curl_close($c); // 释放cURL资源

核心要点 #

• http_build_query()会自动对参数值进行URL编码，无需手动调用urlencode()，同时自动处理参数拼接的&符号
• 禁止对完整URL使用urlencode()，否则会破坏URL的路径分隔符/、参数分隔符?等关键结构
• 修正CURLOPT_TIMEOUT参数：该选项单位为秒，原代码设置50000会导致超时时间长达13小时，调整为合理的50秒
• 添加错误排查代码，便于定位请求失败的具体原因
• 请求完成后调用curl_close()释放资源

内容的提问来源于stack exchange，提问作者jabroni