send2cgeo CORS

/*
Cross site requests
http://stackoverflow.com/questions/13457772/cors-ajax-session-cookies-access-control-allow-credentials-withcredentials
http://stackoverflow.com/questions/13954080/cross-domain-jquery-ajax-call-with-credentials
*/
if(isset($_SERVER['HTTP_ORIGIN']))
{
    if($_SERVER['HTTP_ORIGIN'] == 'http://project-gc.com' || $_SERVER['HTTP_ORIGIN'] == 'https://project-gc.com')
    {
        header('Access-Control-Allow-Origin: '.$_SERVER['HTTP_ORIGIN']);
        header('Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS');
        header('Access-Control-Max-Age: 3600');
        header('Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With');
        header('Access-Control-Allow-Credentials: true');
    }
}