1000 FAQs, 500 tutorials and explanatory videos. Here, there are only solutions!
Use the Access-Control-Allow-Origin header
This guide helps you set up the header "Access-Control-Allow-Origin
", an HTTP header that specifies which origin (domain, protocol, and port) can access resources on a server. This header is used to control cross-origin (CORS) access from a web application.
⚠️ For additional help contact a partner or launch a free tender — also discover the role of the host.
Allowed domains list
You can add the origin of a request to the list of authorized domains to access the server's resources by adding it to the values of the Access-Control-Allow-Origin
header.
To allow, for example, the site https://domain.xyz
to access resources with CORS, the header must be as follows:
Access-Control-Allow-Origin: https://domain.xyz
You can set this via the header()
function of PHP by drawing inspiration from this guide in particular.
If you need this header to be applied everywhere, you can use an auto-prepend.