Bug #64174 [Com]: AJAX request blocked for bad origin

Edit report at https://bugs.php.net/bug.php?id=64174&edit=1 ID: 64174 Comment by: florinpatan at gmail dot com Reported by: php dot net at dzubak dot sk Summary: AJAX request blocked for bad origin Status: Assigned Type: Bug Package: Website problem PHP Version: Irrelevant Assigned To: googleguy Block user comment: N Private report: N New Comment: Request URL:http://www.php.net/manual/vote-note.php?id=99646&page=memcached.sessions&vote=up Request Method:POST Status Code:200 OK Request Headers Accept:application/json, text/javascript, */*; q=0.01 Accept-Charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3 Accept-Encoding:gzip,deflate,sdch Accept-Language:en-US,en;q=0.8 Connection:keep-alive Content-Length:0 Cookie:COUNTRY=ROM%2C79.119.87.98; LAST_LANG=en Host:www.php.net Origin:http://www.php.net Referer:http://www.php.net/manual/en/memcached.sessions.php User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.97 Safari/537.22 X-Json:On X-Requested-With:XMLHttpRequest Query String Parameters id:99646 page:memcached.sessions vote:up Response Headers Connection:close Content-Encoding:gzip Content-language:en Content-Length:106 Content-Type:text/html; charset=utf-8 Date:Sat, 23 Feb 2013 13:46:04 GMT Server:Apache/2.2.21 (FreeBSD) mod_ssl/2.2.21 OpenSSL/0.9.8q PHP/5.4.11-dev Vary:User-Agent,Accept-Encoding X-Powered-By:PHP/5.4.11-dev Response from the website: {"success":false,"msg":"Unable to complete your request at this time. Please try again later..."} Same thing happens when using Opera. Previous Comments: ------------------------------------------------------------------------ [2013-02-20 18:19:19] tyrael@php.net assigning it to Sherif ------------------------------------------------------------------------ [2013-02-08 16:02:42] php dot net at dzubak dot sk Description: ------------ I wanted to vote for comment, but i recieved this nice red X icon. So i investigated and i found error in Chrome console: XMLHttpRequest cannot load http://www.php.net/manual/vote-note.php? id=13494&page=function.setlocale&vote=up. Origin http://php.net is not allowed by Access-Control-Allow-Origin. So, I was using *php.net* domain, but there is this Origin thing blocking AJAX request from domains other than *WWW.php.net*. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=64174&edit=1