Is there an alternative to HTTP_HOST without hardcoding?

Question

PHP

Here is a good description of the problem habrahabr.ru/post/166855 and two solutions, one with setting allowed hosts in php, the second in general in nginx configs.
Maybe there are other options? The goal is to get rid of the hole and additional rituals when transferring to another host

Answer 1

Don't use http_host in scripts?

Answer 2

I may have missed something or did not understand, please explain. Here I collect statistics on visits and http_host, like all other data, is written to the database through pdo or orm, which uses the same pdo. How does the attacker implement the injection?