// Created on savesnippets.com · https://savesnippets.com/duEBv8HaRM3ztN
<?php
function isValidHttpUrl(string $url): bool {
    if (!filter_var($url, FILTER_VALIDATE_URL)) return false;
    $parts = parse_url($url);
    if (!$parts || empty($parts['host'])) return false;
    return in_array(strtolower($parts['scheme'] ?? ''), ['http', 'https'], true);
}

var_dump(isValidHttpUrl('https://example.com'));        // true
var_dump(isValidHttpUrl('javascript:alert(1)'));        // false
var_dump(isValidHttpUrl('ftp://files.example.com'));    // false