Myujth

I am new to rest API. I have this below function which returns HTML data I want this to be accessed from anywhere. I am using Zend with PHP 5.6 please give your suggestion.

 fheader('Access-Control-Allow-Origin: *');

header('Access-Control-Allow-Methods: GET, POST');

header("Access-Control-Allow-Headers: X-Requested-With");

if ($_SERVER['REQUEST_METHOD'] == "GET") 
 $db = MysqliDb::getInstance();
 //$sq = "ct-head";
 $db->where("slug","ct-head");
 $db->orderBy('version', 'desc');
 $template = $db->getOne("tbl_templates");
 $result = $template['modhtml'];

 echo $result;

 else if ($_SERVER['REQUEST_METHOD'] == "POST") 
 echo "POST";
 else 
 http_response_code(405);

I have written something like this but if I access this from other system it is returning CORS error.

Any help would be appreciated.

Bro, you need to understand what is rest API first and what purpose you need it for. Also, MySQL is insecure you should switch to PDO or MySQLi.

Rest API is nothing special it is just an AJAX request. we send JSON data to our rest API and on our API(PHP) side we put some condition on that data to make our API work. If you want to send JSON data from anywhere(different servers, POSTMAN etc) You have to use CORS(CROSS-ORIGIN RESOURCE SHARING) for it. so that your server will allow you to accept data from anywhere. You also have to make and authentication key(Access token). so that you only receive data from trusted sites with a valid access token.

SIMPLE EXAMPLE WITH DEMO

I told in my answer you need cross-origin resource sharing. To told server about this, we use some code to let it know that we are allowing CRUD operations from request outside of our own server. sometimes we only make restful API for ourselves Because of security purpose no server will allow anyone to hit on our site.

use this code at the top of your restful API to allow the request from anywhere outside of your server.

header("Access-Control-Allow-Origin: *");

read more about CORS here