Created
April 9, 2021 17:34
-
-
Save FerraBraiZ/6082fc27d6cc3186b9d092b3c413cc25 to your computer and use it in GitHub Desktop.
PHP Headers allow CORS
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<?php | |
/* set the HTTP_ORIGIN to the requester origin if empty */ | |
if( isset( $_SERVER['HTTP_ORIGIN'] ) && $_SERVER['HTTP_ORIGIN'] != '' ) | |
{ | |
header("Access-Control-Allow-Origin: {$_SERVER['HTTP_ORIGIN']}"); | |
header('Access-Control-Allow-Credentials: true'); | |
header('Access-Control-Max-Age: 0'); // cache for 0 day | |
} | |
/* Access-Control headers are received during OPTIONS requests */ | |
if( $_SERVER['REQUEST_METHOD'] == 'OPTIONS') | |
{ | |
if( isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD'])) | |
header("Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS"); | |
if( isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS'])) | |
header("Access-Control-Allow-Headers: {$_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']}"); | |
exit; | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment