How to prevent cross-origin interface calls in PHP

When ajax is used, we can know that ajax can trigger an interface across domains, but this causes a problem that any domain can call. in this case, we need to consider using anti-Leech technology.

When ajax is used, we can know that ajax can trigger an interface across domains, but this causes a problem that any domain can call. in this case, we need to consider using anti-Leech technology, in PHP, $ _ SERVER ["HTTP_REFERER"], $ _ SERVER ["HTTP_REFERER"] contains the URL of the previous page linked to this page, if you come in directly, $ _ SERVER ["HTTP_REFERER"] has no value. The following is a simple example to describe how PHP creates and submits data against counterfeiting:

The interface called by non-9streets.cn is Access denied:

 

PHP code

1. // Judge refer to prevent other domain calls
2. $ Refer = $ _ SERVER ['http _ referer'];
3. If ($ refer ){
4. $ Url = parse_url ($ refer );
5. If ($ url ['host']! = '9streets. cn '){
6. Exit ('Access denied! ');
7. }
8. }

Methods that can be called between subdomains

 

PHP code

1. // Judge refer to prevent other domain calls
2. $ Refer = $ _ SERVER ['http _ referer'];
3. If ($ refer ){
4. $ Url = parse_url ($ refer );
5. $ T = explode ('.', $ url ['host']);
6. $ L = count ($ t );
7. $ DomainStr = $ t [$ L-2]. '.'. $ t [L-1];
8. If ($ domainStr! = '9streets. cn '){
9. Exit ('Access denied! ');
10. }
11. }