• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question How to manage CORS with PHP using Plesk

PiTiNiNjA

New Pleskian
Hello!

I'm having trouble trying to enable CORS on my PHP API.

If I put header('Access-Control-Allow-Origin: *'); in my PHP code, it has no effect.

But if I put Header set Access-Control-Allow-Origin * in the Plesk Apache configuration, then it works.

How can I let PHP manage the CORS headers?

Regards
 
Last edited:
Hello IgorG and thank you for your time,

I've read this documentation already. In fact if I put these lines in Plesk Apache directives:

Header set Access-Control-Allow-Origin "*"
Header set Access-Control-Allow-Credentials "true"
Header set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
Header set Access-Control-Allow-Headers "X-Requested-With,Content-Type,Authorization"
Header set Access-Control-Max-Age "864000"


It works great, but what I want is to set CORS headers in my PHP script (not in Plesk) so I can do programmatic controls.

How could I achieve this? Is it possible to "override" Plesk with PHP when it comes to CORS headers?
 
Last edited:
Hi,

I've tried all these methods but for some reason it's not working. I am still getting the CORS errors. Any ideas how I can fix it?
 
Back
Top