Error Access-Control-Allow_Origin not allowed [duplicate]

Question

Error Access-Control-Allow_Origin not allowed [duplicate]

Navigation

#1 by (2 votes)
#2 by (1 votes)
#3 by (1 votes)

2

I'm trying to access another site from my program.php, but it's returning the message:

XMLHttpRequest can not load In 'Access-Control-Allow-Origin' header is present on the requested resource. Origin ' link ' is therefore not allowed access.

I've changed the HTML code, but it still keeps returning the same error. HTML code below:

<!DOCTYPE html>
<html>
<head>
<?php
   header("Access-Control-Allow-Origin: *");
?>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=ISO-8859-1"> 
  <meta name="viewport" content="initial-scale=1.0, user-scalable=no"/>
  <title>Projeto Yara Tecnologia</title>
  <meta charset="UTF-16">

  <style>html {
  font-family: Helvetica, Arial, sans-serif;
  font-size: 100%;
  background: #333;
}

Adding the command <?php header("Access-Control-Allow-Origin: *"); ?> made no difference!

Is there a correct place to write this command in HTML?

What am I doing wrong?

php cors xmlhttprequest

asked by anonymous 09.06.2015 / 01:11

3 answers

Is there a plugin that serves as a mask and validator for 24h hours? V9 (VBA) - IntraGroup Sales Documents

score 2 · Answer 1

Header should be added on the landing page, not the source page.

Let's say I create a page http://meusitedeorigem.com/teste.php , on this page I have a script that calls ajax the address http://siteexterno.com/autentica , who needs to have the Header of Access-Control-Allow-Origin: * is the second one, it is he who has to say who can access it.

So it's no use adding the header to your page, if the other site is yours you should add the header in it, if it is not yours there is nothing that can be done, in this case you must make the request for it with PHP and not with javascript.

score 1 · Answer 2

Try to add these headers:

header('HTTP/1.1 200' );
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, WCTrustedToken, userId, WCToken, PersonalizationID, AUTHUSER, Primarynum');
header('Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT');

score 1 · Answer 3

Headers need to be submitted before any content. Change to:

<?php
   header("Access-Control-Allow-Origin: *");
?>
<!DOCTYPE html>
<html>
<head>
...

And ensures that the file is being interpreted correctly by PHP.