Replace password in URL to "******" if present (prepare secret URL for publishing in logs, reports, etc.)

url_hide_password.php

<?php

$username = 'John';
$password = '%3q~7:rN@p';

$url = 'http://' . urlencode($username) . ':' . urlencode($password) . '@www.example.com/path/to/file.txt';

echo "Original URL: {$url}\n";
echo "Hidden password URL: " . hidePasswordFromUrl($url) . "\n";

/**
 * Replaces password in URL to "******" (if present)
 */
function hidePasswordFromUrl(string $url): string
{
    return preg_replace('|(^\w+://[^:]+:)(.+)@|', '\\1******@', $url);
}

// Outputs:
//
// Original URL: http://John:%253q%7E7%3ArN%[email protected]/path/to/file.txt
// Hidden password URL: http://John:******@www.example.com/path/to/file.txt
//