HTTP_HOST always has origin access to resources afaik (unless you are using subdomains that is), just confirm that it is the host you want to give access to. Besides that I think you want to have that access control @ $playbackbase url as well. Aziz On Fri, Jan 24, 2014 at 3:00 PM, <rkevinburton@xxxxxxxxxxx> wrote: > > I have the following code to add the appropriate header then redirect but > I am still getting an error that this header is missing. What am I doing > wrong? > > header("HTTP/1.1 301 Moved Permanently"); > header("Access-Control-Allow-Origin: http:// > ".$_SERVER['HTTP_HOST']); > $augmentedUrl = $playbackbase."?authTicket=$authTicket"; > header("Location: $augmentedUrl"); > > Thank you. >