allow browsers to access to export.php without domain name problem (that's a public API right ?)