apache部分 ``` <Directory "/home/ssdb/admin"> Header set Access-Control-Allow-Origin * Header set Access-Control-Allow-Methods "GET, POST, OPTIONS, PUT, DELETE" #Header set Access-Control-Allow-Headers "Content-Type" #Header set Access-Control-Expose-Headers * Header set Access-Control-Allow-Headers "unionid,shop_id,colonel_id,express1_id,express2_id" #Header set Access-Control-Allow-Credentials " true" #Header set Access-Control-Max-Age " 1728000" Options FollowSymLinks Indexes Require all granted AllowOverride All </Directory> ``` ~~~ Access-Control-Allow-Origin：表示服務端允許的請求源，*標識任何外域; Access-Control-Allow-Credentials：false 表示是否允許發送Cookie，設置為true 同時，ajax請求設置withCredentials = true,瀏覽 器的cookie就能發送到服務端 Access-Control-Expose-Headers：調用getResponseHeader（）方法時候，能從header中獲 取的參數 * “預檢”緩存時間，服務器設置響應頭：Access-Control-Max-Age * “預檢”請求時，允許請求方式則需服務器設置響應頭：Access-Control-Request-Method ~~~ php部分 ~~~ if ($request->isOptions()) { return json(null,200); } 或 if (strtoupper($request->method()) == "OPTIONS") { header('HTTP/1.1 200 OK'); } ~~~ 獲取自定義header信息 ``` php: $header``=?apache_request_headers(); ``` 或 ~~~ tp5: $data=$request->header('shop_id'); ~~~