设置header

<?php
$origin = isset($_SERVER['HTTP_ORIGIN'])? $_SERVER['HTTP_ORIGIN']:'';

$allow_origin=array(
	'http://www.aaa.com',
	'http://www.bbb.com',
);
if( $origin in $allow_origin ){
	header("Access-Control-Allow-Origin:".$origin);
	header("Access-Control-Allow-Headers:Content-Type,Authorization,X-CSRFToken, Token");
	header("Access-Control-Allow-Methods:GET,POST");

}

注：不要用param()获取参数，要不然配置了hearder也不会生效！！！