header('Access-Control-Allow-Origin', '*') ->header('Access-Control-Allow-Methods', 'GET, POST'); } }