XMLHttpRequest cannot load http://example.com/test.php. No 'Access-Control-Allow-Origin

Question

XMLHttpRequest cannot load http://example.com/test.php. No Access-Control-Allow-Origin header is present on the requested resource. Origin http://eample.com is therefore not allowed access.

How to resolve it. i added following headers in that php file:

header('Access-Control-Allow-Origin: *');

header('Access-Control-Allow-Methods: GET, POST, OPTIONS');

header('Access-Control-Allow-Headers: Origin, Content-Type, Accept, 
Authorization, X-Request-With');

header('Access-Control-Allow-Credentials: true');

i replace my domain name 'codeXXX' with 'example' dont confuse with that

you have to add CORS support in server config, more details on CORS developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS — Nemani
– Nemani, Commented Aug 30, 2017 at 5:11
Make sure this is right at the top of your .php script so that nothing it output before these headers are sent — Phil
– Phil, Commented Aug 30, 2017 at 5:16
Also, check your browser's Network console. is there an OPTIONS request? What do the response headers look like for the failed request? — Phil
– Phil, Commented Aug 30, 2017 at 5:18
Possible duplicate of "No 'Access-Control-Allow-Origin' header is present on the requested resource" — M. Eriksson
– M. Eriksson, Commented Aug 30, 2017 at 5:18

sensorario · Accepted Answer · 2017-08-30 05:22:09Z

1

The header

header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST');

MUST be given in response to an OPTION request to "http://example.com/test.php". If OPTION request contains this header, the following GET (or POST) will be accepted.

If the browser says that the header "Access-Control-Allow-Origin" is not present, ... just add it ^_^

header('Access-Control-Allow-Headers: Access-Control-Allow-Origin, Origin, Content-Type, Accept, Authorization, X-Request-With');

edited Aug 30, 2017 at 5:22

answered Aug 30, 2017 at 5:11

sensorario

21.9k31 gold badges105 silver badges177 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

Phil Over a year ago

I feel like OP would have a different error message if the server weren't responding correctly to an OPTIONS request.

adeneo Over a year ago

And the OP actually have OPTIONS in the allowed methods, you don't ?

sensorario Over a year ago

You have two request. First one is OPTION that tells to your client how can be the second.

sensorario Over a year ago

ANY time you make a request with angular, the request is preceded by an OPTION request.

Phil Over a year ago

@sensorario that's not correct. A standard GET request without authorization will be simple and not require a pre-flight request. A POST request using Content-type: application/x-www-form-urlencoded is also excempt

Collectives™ on Stack Overflow

XMLHttpRequest cannot load http://example.com/test.php. No 'Access-Control-Allow-Origin

1 Answer 1

5 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

5 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related