php域名授权实现方法

<?php
$allowedDomains = ['example.com', 'www.example.com'];

$requestHost = $_SERVER['HTTP_HOST'];

if (!in_array($requestHost, $allowedDomains)) {
    header('HTTP/1.1 403 Forbidden');
    echo 'Access Denied';
    exit();
}

// 允许访问的代码
?>

<?php
$allowedCookie = 'authorized_domain';

if (!isset($_COOKIE[$allowedCookie]) || $_COOKIE[$allowedCookie] !== 'example.com') {
    header('HTTP/1.1 403 Forbidden');
    echo 'Access Denied';
    exit();
}

// 允许访问的代码
?>

<?php
session_start();

$allowedDomains = ['example.com', 'www.example.com'];

$requestHost = $_SERVER['HTTP_HOST'];

if (!in_array($requestHost, $allowedDomains)) {
    header('HTTP/1.1 403 Forbidden');
    echo 'Access Denied';
    exit();
}

if (empty($_SESSION['authorized'])) {
    $_SESSION['authorized'] = true;
}

// 允许访问的代码
?>

<?php
header("Access-Control-Allow-Origin: https://example.com");
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type");
?>