title: Cross-Origin Request Blocked. Wordpress Plugin Not Working
body: <p>We have a Wordpress website, hosted by GoDaddy. Before we went "live" we had it located at staging.coiski.com (wordpress was installed in a folder called /staging), and then when we went "live" we moved it to coiski.com using the following instructions:</p>
  
  <p><a href="http://coiski.com/work" rel="nofollow noreferrer">askwpgirl.com/move-wordpress-from-subdirectory-to-root-directory</a></p>
  
  <p>In the process of the move, everything worked except our WPB Filterable Portfolio plugin on the <a href="http://askwpgirl.com/move-wordpress-from-subdirectory-to-root-directory" rel="nofollow noreferrer">coiski.com/work</a> page. Specifically, none of our lightboxes are working, and we are getting the following message:</p>
  
  <pre><code>Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://staging.coiski.com/wp-admin/admin-ajax.php. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘http://coiski.com, *’).
  </code></pre>
  
  <p>Here's what we've tried, to no avail: </p>
  
  <p>Adding the following code to our .htaccess file: </p>
  
  <pre><code>&lt;FilesMatch "\.(php)$"&gt; 
   &lt;IfModule mod_headers.c&gt; 
   Header set Access-Control-Allow-Origin "*" 
   &lt;/IfModule&gt; 
  &lt;/FilesMatch&gt;
  </code></pre>
  
  <p>Adding the following code to our header.php file: </p>
  
  <pre><code>header('Access-Control-Allow-Origin: *'); header('Access-Control-Allow-Methods: GET, POST');
  </code></pre>
  
  <p>Any other ideas what we could try? Any help would be greatly appreciated.</p>