Update: 2026-07-26 02:51:53
This commit is contained in:
@@ -15,7 +15,8 @@ $allowedOrigins = array_filter([
|
||||
|
||||
$requestOrigin = $_SERVER['HTTP_ORIGIN'] ?? '';
|
||||
if (!empty($requestOrigin)) {
|
||||
if (in_array($requestOrigin, $allowedOrigins, true)) {
|
||||
$isLocal = strpos($requestOrigin, 'http://localhost') === 0 || strpos($requestOrigin, 'http://127.0.0.1') === 0;
|
||||
if ($isLocal || in_array($requestOrigin, $allowedOrigins, true)) {
|
||||
header("Access-Control-Allow-Origin: " . $requestOrigin);
|
||||
} else {
|
||||
header("Access-Control-Allow-Origin: https://siromove.com");
|
||||
@@ -41,7 +42,8 @@ try {
|
||||
|
||||
$allowed1 = getenv('allowedDriver1');
|
||||
$allowed2 = getenv('allowedDriver2');
|
||||
$allowedAudiences = array_values(array_filter([$allowed1, $allowed2]));
|
||||
$allowed3 = getenv('allowedDriverWeb') ;
|
||||
$allowedAudiences = array_values(array_filter([$allowed1, $allowed2, $allowed3]));
|
||||
|
||||
if (empty($id) || empty($password) || empty($audience)) {
|
||||
jsonError('ID and password are required.', 400);
|
||||
|
||||
Reference in New Issue
Block a user