magento crossdomain issue fething data using ajax from others domains - php

Question

In magento i have used videos instead of product images, this is a marketplace.there are four type of users in frontend
1. seller
2. corporate
3. business agent
4. website customer
Business Agent -> business agent provide all seller products to others website and if buying through other website he will get commision so i am giving and embedded code to business agento so they can implement this to others website but when i am trying to hit ajax from other domain it show cross domain error.
Cross-Origin Request Blocked:
The Same Origin Policy disallows reading the remote resource at http://shopahol.com/demo/test.php?atoken=c0Q5QUk1VUgreEk9.
(Reason: CORS header 'Access-Control-Allow-Origin' missing).
To resolve this issue i have tried to add Access-Control-Allow-Headers to index.php
header('Access-Control-Allow-Origin: *');
but problem not solved same error. then i have tried to put crossdomain.xml in my root folder
<!--l version="1.0-->
<!--pan class="hiddenSpellError" pre=-->
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>
it also failed same issue can anyone have any solution or i doing something wrong.
this is my code to show video on others website. (simply html or php file)
<!-- html starts -->
<div id="tevid" style="width:100%;">
<video id="homevideo" width="100%" autoplay onended="run()"></video>
<div class="bg-background-new">
Product Name
<div class="price-new" id="price"></div>
Buy Now
</div>
</div>
<!-- javascript starts *Remove this script if you already included ajax jquery -->
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.0/jquery.min.js" > </script>
<script>
var video_count =0;
var videoPlayer = document.getElementById("homevideo");
var allproduct = [];
function getvideos(){
$( document ).ready(function() {
$.ajax({
url: "http://shopahol.com/demo/test.php?atoken=c0Q5QUk1VUgreEk9",
type: "GET",
dataType: "json",
success: function(data){ for(var i in data) { allproduct.push(data[i]); } run(); },
error: function() { alert("Error During Process"); }
});
});
}
function run(){
var nextVideo = allproduct[video_count].videourl;
var price = allproduct[video_count].pric;
var name = allproduct[video_count].name;
var url = allproduct[video_count].url;
videoPlayer.src = nextVideo;
videoPlayer.play();
video_count++;
$("#price").html("$ "+price);
$("#product-name").html(name);
$("#product-name").attr("href", url)
$("#button1").attr("href", url)
if(allproduct.length == video_count){ video_count = 0; }
}
$( document ).ready(function() {
getvideos() ;
});
</script>
<!-- css starts -->
<style>
a.new-button {
background: red none repeat scroll 0 0;
border: medium none;
bottom: 0;
color: #fff;
cursor: pointer;
float: right;
font-weight: bold;
margin-top: 10px;
padding: 10px 20px; float: right;
}
.price-new {
color: #000;
display: block;
float: right;
line-height: 35px;
padding: 10px;
}
a.product-name-new {
color: #000;
display: inline-block;
float: right;
line-height: 35px;
margin: 10px 0;
position: relative;
right: 2px;
text-decoration: none;
}
.bg-background-new {
background: transparent none repeat scroll 0 0;
bottom: 65px !important;
display: block;
position: relative;
right: 0 !important;
width: 99%;
}
</style>
in help appreciated
thanks in advance

Answer 1

I figure it out so i am posting answer for others help in same situation
I changed my ajax function
function getvideos(){
$( document ).ready(function() {
$.ajax({
url: "http://shopahol.com/demo/test.php?atoken=WkFBU2F6bFdCNFU9",
type: "GET",
crossDomain: true,
dataType: "jsonp",
jsonpCallback: 'giveBacktome',
error: function() { console.log("Error During Process"); }
});
});
}
it works

Answer 2

Resolve issue: CORS header, by adding either adding a rule to .htaccess or in apache/IIS etc (DevOps server configuration issue).
for example in .htaccess to allow all domains:
<IfModule mod_headers.c>
Header set Access-Control-Allow-Origin "*"
</IfModule>
or foo-domain.com:
<IfModule mod_headers.c>
Header set Access-Control-Allow-Origin "foo-domain.com"
</IfModule>