Ajax requests resource issues across domains

It's actually quite simple: just set up a response header on the server: header ("Access-control-allow-origin: *"); Nice, is there any wood?

The following two sentences can also be taken:

header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept");header(‘Access-Control-Allow-Methods: GET, POST, PUT‘);

其他人呢的看法：

 Access-Control-Allow-Origin。HTTP响应头，指定服务器端允许进行跨域资源访问的来源域。可以用通配符*表示允许任何域的JavaScript访问资源，但是在响应一个携带身份信息(Credential)的HTTP请求时，Access-Control-Allow-Origin必需指定具体的域，不能用通配符。

Ajax requests resource issues across domains