// enter the origins you want allowed for cors to work $_SESSION['allowed_origins'] = array('*', "site1.com", "site2.com");  // use this function to cycle through the list and enter these dynamically function setAllowedHeadersAPI($array) {     foreach ($_SESSION['allowed_origins'] as $origin) {         header("Access-Control-Allow-Origin: $origin");         header("Access-Control-Allow-Headers: $origin");     } }  // call function and pass the array through it setAllowedHeadersAPI($_SESSION['allowed_origins']);

Read more of this post