OLD | NEW |
1 <?php | 1 <?php |
2 require_once '../../resources/portabilityLayer.php'; | |
3 | |
4 header("Access-Control-Allow-Origin: *"); | 2 header("Access-Control-Allow-Origin: *"); |
5 header("Access-Control-Max-Age: 0"); | 3 header("Access-Control-Max-Age: 0"); |
6 | 4 |
7 if ($_SERVER["REQUEST_METHOD"] == "OPTIONS") { | 5 if ($_SERVER["REQUEST_METHOD"] == "OPTIONS") { |
8 // Split the Access-Control-Request-header value based on the token. | 6 // Split the Access-Control-Request-header value based on the token. |
9 $accessControlRequestHeaderValues = explode(", ", $_SERVER["HTTP_ACCESS_CONT
ROL_REQUEST_HEADERS"]); | 7 $accessControlRequestHeaderValues = explode(", ", $_SERVER["HTTP_ACCESS_CONT
ROL_REQUEST_HEADERS"]); |
10 if (in_array("x-custom-header", $accessControlRequestHeaderValues)) // Case-
sensitive comparison to make sure that browser sends the value in lowercase. | 8 if (in_array("x-custom-header", $accessControlRequestHeaderValues)) // Case-
sensitive comparison to make sure that browser sends the value in lowercase. |
11 header("Access-Control-Allow-Headers: X-Custom-Header"); // Add "Access
-Control-Allow-Headers: X-Custom-Header" to "OPTIONS" response. | 9 header("Access-Control-Allow-Headers: X-Custom-Header"); // Add "Access
-Control-Allow-Headers: X-Custom-Header" to "OPTIONS" response. |
12 | 10 |
13 } else if ($_SERVER["REQUEST_METHOD"] == "GET") { | 11 } else if ($_SERVER["REQUEST_METHOD"] == "GET") { |
14 if (isset($_SERVER["HTTP_X_CUSTOM_HEADER"])) | 12 if (isset($_SERVER["HTTP_X_CUSTOM_HEADER"])) |
15 echo "PASS"; | 13 echo "PASS"; |
16 else | 14 else |
17 echo "FAIL"; | 15 echo "FAIL"; |
18 } | 16 } |
19 ?> | 17 ?> |
OLD | NEW |