Getting Access-Control-Allow-Origin error while posting data from one domain to other

Question

Recently I tried header('Access-Control-Allow-Origin: *'); to post to other domain and it was working fine. This is the whole code and still working fine.

<?php
 header('Access-Control-Allow-Origin: *');
header("X-XSS-Protection: 0");
echo $_POST["roll"];
echo $_POST["id"];
echo $_POST["email"];
?>

However, when I use it in sending emails, I'm getting Access-Control-Allow-Origin error again. This is the whole code :

<?php
 header('Access-Control-Allow-Origin: *');
header("X-XSS-Protection: 0");
echo $_POST["roll"];
echo $_POST["id"];
echo $_POST["email"];

$subject = 'Reset Password - ITM Exodia';
$toEmail = '$_POST["email"]';
$message = 'Reset Password - ITM Exodia';          
$headers  = 'MIME-Version: 1.0' . "\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
$headers .= "From: ITM Exodia" . "\r\n";


$to=$toEmail;
$subject=$subject;
$from="Exodia@zarainforise.com"; 
$headers = "MIME-Version: 1.0\n";
$headers .= "Content-type: text/html; charset=iso-8859-1\n";
$headers .= "From: <".$from.">\n";
$headers .= "X-Priority: 1\n";
$message='<a href="http://localhost/exodia/reset.php?q=$_POST['id']" >Reset Password</a>';
$message .= "<br/>Regards $_POST['id']<br />saurav";


if (mail($to, $subject, $message, $headers )) {
  $data['msg']="Message send successfully";
} 
else {
  $data['msg']="Please try again, Message could not be sent!";
}  
?>

With this code the data is not even posted and it gives Access-Control-Allow-Origin error. Where did I go wrong ?

Have you checked the other same questions ? exp. http://stackoverflow.com/questions/6114436/access-control-allow-origin-error-sending-a-jquery-post-to-google-apis — Nalin Aggarwal, Aug 19 '16 at 19:47
However, when I remove mail($to, $subject, $message, $headers ) , it starts working. — Tom Cruise, Aug 19 '16 at 21:36

score 0 · Answer 1 · answered Aug 19 '16 at 21:09

0

If you're using passwords in requests you should also add: 'Access-Control-Allow-Credentials: true' header line

answered Aug 19 '16 at 21:09

Alex Slipknot

2,439
1
18
26

Getting Access-Control-Allow-Origin error while posting data from one domain to other

1 Answers1