1. Home
    2. »
  2. PHP
    3. » Cross-Origin Resource Sharing (CORS)

Cross-Origin Resource Sharing (CORS)

PHP
admin

This code performs a function called Cross-Origin Resource Sharing (CORS). Cross-Origin Resource Sharing (CORS) is a mechanism that allows many resources (e.g., fonts, JavaScript, etc.) on a web page to be requested from another domain outside the domain from which the first resource was served.

$allowed_domains = ['https://qiksoft.com', 'https://aiplaygroundclub.com'];
if (in_array($_SERVER['HTTP_ORIGIN'], $allowed_domains)) {
    header('Access-Control-Allow-Origin: ' . $_SERVER['HTTP_ORIGIN']);
}

The code block checks if the server from which the request originated ($_SERVER['HTTP_ORIGIN']) is in the array of allowed domains ($allowed_domains). If the requesting server is deemed trustworthy (i.e., it is listed in the $allowed_domains array), the server responding to the request includes the 'Access-Control-Allow-Origin' header in its response. The value of this header is set to the origin of the requesting server.

This all means that the responding server is giving permission for its resources to be accessed by the requesting server. In other words, it's opening up its Cross-Origin Resource Sharing (CORS) security for specified trusted servers.

Tags