PHP cURL add "Access-Control-Allow-Origin: *" header for specific endpoint

Question

I have such code on my php server (5.2) endpoint GET http://mydomain/get-code.php:

<?php
    header("Access-Control-Allow-Origin: *");

    $data = 'id=' . '123456' . '&' .
            'text=' . 'some text' . '&' .
            'code=' . urlencode($_GET['code']);
    $ch = curl_init('https://someapi.com/login/oauth');
    curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

    $response = curl_exec($ch);

    preg_match('/hash=([0-9a-f]+)/', $response, $out);
    echo $out[1];
    curl_close($ch);
?>

I'm requesting GET http://mydomain/get-code.php from another domain.

I'm getting CORS error in browser console:

XMLHttpRequest cannot load http://mydomain/get-code.php No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:9292' is therefore not allowed access.

Any ideas?

I'm requesting GET mydomain/get-code.php from another domain. — Kosmetika
– Kosmetika, Commented Jan 28, 2016 at 21:31
@AlonEitan thanks, I've added header("Access-Control-Allow-Origin: *"); but this didn't help — Kosmetika
– Kosmetika, Commented Jan 28, 2016 at 21:32

Blake A. Nichols · Accepted Answer · 2016-01-28 21:26:58Z

4

Access-Control-Allow-Origin is for the server that is receiving the request, not the client sending the request.

answered Jan 28, 2016 at 21:26

Blake A. Nichols

8701 gold badge6 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Blake A. Nichols Over a year ago

You would need to add this to the mydomain/get-code.php page: header("Access-Control-Allow-Origin: *");

Blake A. Nichols Over a year ago

You have to add it to the page that is being requested (the server), not from the client (where you are using curl)

Collectives™ on Stack Overflow

PHP cURL add "Access-Control-Allow-Origin: *" header for specific endpoint

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related