title: allow cross domain ajax requests
body: <p>In my project , I need to allow others send ajax requests to my script . So external requests may come from other websites and domains and maybe from browser extensions.<br>
  I've added simply these two lines at top of my script to let them do it:  </p>
  
  <pre><code>header('Access-Control-Allow-Origin: *');
  header('Access-Control-Allow-Methods: GET, POST');  
  </code></pre>
  
  <p>Now my question is this : Is here any security consideration I've missed? does this simple solution make serious problems?<br>
  If so , what is the better solution?  </p>
  
  <p>Thanks for response.</p>