From ffc57cdcf2d2bca42a44b0f123c62f9ff89e823a Mon Sep 17 00:00:00 2001
From: Babak Alizadeh <alizadeh.babak@live.com>
Date: Sun, 5 Nov 2023 10:44:36 -0800
Subject: [PATCH] some progress

---
 public_html/index.php | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/public_html/index.php b/public_html/index.php
index 0f49629..1725c5b 100644
--- a/public_html/index.php
+++ b/public_html/index.php
@@ -1,10 +1,16 @@
 <?php
-$http_origin = $_SERVER['HTTP_ORIGIN'];
-
-if ($http_origin == "https://app.hesabix.ir" || $http_origin == "http://insider.hesabix.ir")
-{
-    header("Access-Control-Allow-Origin: $http_origin");
+$http_origin = false;
+if(isset($_SERVER['HTTP_ORIGIN']))
+    $http_origin = $_SERVER['HTTP_ORIGIN'];
+elseif(isset($_SERVER['HTTP_ORIGIN']))
+    $http_origin = $_SERVER['HTTP_REFERER'];
+if($http_origin){
+    if ($http_origin == "https://app.hesabix.ir" || $http_origin == "http://insider.hesabix.ir" || $http_origin == "http://localhost")
+    {
+        header("Access-Control-Allow-Origin: $http_origin");
+    }
 }
+
 header("Access-Control-Allow-Headers: *");
 header("Access-Control-Allow-Methods: *");
 header("Allow: GET, POST, OPTIONS, PUT, DELETE");