weixin_33709609 2015-12-21 07:07 采纳率: 0%
浏览 52

用PHP实现CORS

Simply I'm making an app using Codeigniter as PHP framework and I'm using API for rendering the view on cross site with ajax request. Now my problem is I have hosted all my files in one site say homnath.com.np and provided the API key to different websites by storing their webURL into database, say abc.com, xyz.com and many others. Now when xyz.com hits in my site homnath.com by ajax, how could I know the webURL that is hitting on my site homnath.com by API key, and how to allow for it for CORS if it is a valid and listed website. Moreover I have used header("Access-Control-Allow-Origin: *"); to allow for all webURLS and now I want to filter them and provide access to only those which are listed on my database. How can I do it in controller of codeigniter. I want to block for rest of the sites.

  • 写回答

1条回答 默认 最新

  • python小菜 2016-01-08 08:14
    关注

    for this you can check for the URL as

             $incomingOrigin = $webURL;
    
             $hotdat = array();
              foreach ($hotelURL as $releted){         //$hotelURL is an array from your database
              $addURL = $releted->url;              // $releted->url the db field name for url
             array_push($hotdat, $addURL);
             }
    
           if ($incomingOrigin !== null && isOriginAllowed($incomingOrigin, $hotdat)== TRUE)
          {
           header("Access-Control-Allow-Origin: $incomingOrigin");
         }else{
            echo ("CSRF protection in POST request: detected invalid Origin header: " . $incomingOrigin);
       header("Access-Control-Allow-Origin: http://bookingpoints.com");
         }
    
    评论

报告相同问题?

悬赏问题

  • ¥15 三菱变频器模块怎么检测触发
  • ¥30 求一下解题思路,完全不懂。
  • ¥30 关于#硬件工程#的问题:求一下解题思路
  • ¥15 运筹学对偶单纯行法构造扩充问题
  • ¥20 XP系统的老电脑一开机就提示找不到rundll.exe,付费求解
  • ¥15 milvus查询出来的score怎么转换成0-1之间的相似性
  • ¥15 lvgl V9移植到linux开发板
  • ¥15 VB.net中在窗体中创建一个button控件来关闭窗体,但是提示错误,我该怎么办
  • ¥15 网上下载好的程序但是arduinoIDE编程报错,运行不了,哪里出错了,能具体给改一下吗
  • ¥15 Sharepoint JS开发 付费技术指导