PHP CORS All

CORS (Cross-Origin Resource Sharing) is a mechanism that allows many resources (e.g., fonts, JavaScript, etc.) on a web page to be requested from another domain outside the domain the resource originated from. However, CORS is subject to certain security constraints, which prevent a web page from making requests to a different domain than the one that served the web page.

PHP CORS All is a PHP framework that provides an easy-to-use interface for developers to handle CORS in a secure and efficient way. Its main features include:

• Support for preflight and simple CORS requests
• Customizable policy for CORS handling
• Protection against CSRF (Cross-Site Request Forgery)

Installation

PHP CORS All can be installed via Composer. To install, run the following command:

$ composer require techwinder/php-cors-all

Usage

After installing PHP CORS All, you can create an instance of the CorsAll class to handle CORS requests. Here is an example:

<?php

require_once 'vendor/autoload.php';

use TechWinder\CorsAll\CorsAll;

$cors = new CorsAll();

if ($cors->handle()) {
    // Your code here
}

The handle() method checks if the incoming request is a CORS request and, if so, applies the configured CORS policy. Note that you should call this method before doing any request handling.

Configuring CORS Policy

PHP CORS All provides a default CORS policy that should work for most situations. However, you can customize the policy by passing an array of options to the CorsAll constructor.

Here is an example of a customized CORS policy:

<?php

require_once 'vendor/autoload.php';

use TechWinder\CorsAll\CorsAll;

$cors = new CorsAll([
    'origin' => 'https://example.com',
    'methods' => ['GET', 'POST', 'PUT'],
    'headers' => ['X-Requested-With', 'Content-Type'],
    'credentials' => true
]);

if ($cors->handle()) {
    // Your code here
}

In this example, we've set the origin to https://example.com, allowed only GET, POST, and PUT methods, added X-Requested-With and Content-Type headers, and enabled credentials.

You can find more information about the available options in the official documentation.

Conclusion

PHP CORS All is a simple and effective solution for handling CORS requests in PHP applications. With its easy-to-use interface and customizable policy, it provides developers with a secure and efficient way to handle cross-domain requests.