PHP：請求的資源上不存在“Access-Control-Allow-Origin”標頭

Question

在 .htaccess 我把它如下所示。 但我不斷收到錯誤消息。

從源“https://...”訪問“https:...”處的 XMLHttpRequest 已被 CORS 策略阻止：請求的資源上不存在“Access-Control-Allow-Origin”標頭。

Header set Access-Control-Allow-Origin "*"
Header set Access-Control-Allow-Origin "PUT, POST, DELETE, GET, OPTIONS"
Header set Access-Control-Allow-Origin "Accept, Authorization, Content-Type"

RewriteEngine On
Options All -Indexes

# ROUTER WWW Redirect.
RewriteCond %{HTTP_HOST} !^www\. [NC]
RewriteRule ^ https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# ROUTER HTTPS Redirect
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# ROUTER URL Rewrite
RewriteCond %{SCRIPT_FILENAME} !-f
RewriteCond %{SCRIPT_FILENAME} !-d
RewriteRule ^(.*)$ index.php?route=/$1 [L,QSA]

Answer 1

您只能有一個 Allow origin 標頭，因此最后一個將被解釋。

Header set Access-Control-Allow-Origin "*"
Header set Access-Control-Allow-Methods "PUT, POST, DELETE, GET, OPTIONS"
Header set Access-Control-Allow-Headers "Accept, Authorization, Content-Type"