GET HttpRequest not working on HTML5 target?

echo "Hello ".$_GET['name']."!";

Import mojo
Import brl.httprequest

Function Main()
	New Game
End

Class Game Extends App Implements IOnHttpRequestComplete

	Field req:HttpRequest
	
	Method OnHttpRequestComplete:Void(req:HttpRequest)
    
        Print "Http GET complete!"
        Print "Status="+req.Status()
        Print "ResponseText="+req.ResponseText()
        
    End

	Method OnCreate()
	
		SetUpdateRate 60
		
		req=New HttpRequest("GET","http://localhost/merchantsim/test.php?name=Stefan",Self)
        req.Send()
	
	End
	
	Method OnUpdate()
	
		UpdateAsyncEvents
	
		If KeyHit(KEY_ESCAPE) Then EndApp()
	
	End
	
	Method OnRender()
	
		Cls
		
		DrawText "Http GET bytes received="+req.BytesReceived(),0,0
	
	End

End

Http GET complete!
Status=200
ResponseText=Hello Stefan!

Http GET complete!
Status=0
ResponseText=

http://localhost/subdirectory/projectname.build/html5/MonkeyGame.html

header('content-type: application/json; charset=utf-8');
header("access-control-allow-origin: *");

$http_origin = $_SERVER['HTTP_ORIGIN'];
// is it form some local server on diff port , or a specific domain ?
// if so simply allow iy by setting the Access-Control-Allow-Originto the incomming $http_origin
if ( preg_match( "/localhost:/i", $http_origin) || $http_origin == "http://www.domain2.com")
{  
    header("Access-Control-Allow-Origin: $http_origin");
}

Class MyPHPinfo
	Field baseURL:String = "loopback:80"
	Field key:String = "app7894561230" ' some big stupid key , possibly even hash it 
	Field refreshTime:Int = 5000 ' my app looks for data every few seconds. 
	Field lastSendTime:Int = 0  
	Field isBusy:Bool = False
	
	Method New()
		baseURL = "loopback:80"
		refreshTime = 5000
		lastSendTime = 0
	End
	Method New(_baseURL:String, _refreshTime:Int = 5000)
		baseURL = _baseURL
		refreshTime = _refreshTime
		lastSendTime = 0		
	End	
End

<?php
header("HTTP/1.0 888 Fun Stuff"); // sets return status to custom # as you like. 
// i use 888 to tell my app/exe's that they reaches one of my PHP pages . 
header("Server: "); // scrub server info from return header to client / app they dont need to know it 
header("X-Powerd-By: ");
header('content-type: text/html; charset=utf-8'); // set as you need this is PHP default stype 
//header("access-control-allow-origin: *"); // << um no unless you must 
 
$http_origin = $_SERVER["HTTP_ORIGIN"];
   
$rawdata = file_get_contents('php://input');
// echo "Debug: This is the message content :>" . htmlspecialchars($rawdata) ."<:". PHP_EOL ;
// $rawdata  is not the vars in the URI , but what may have been 'posted'
 

function curPageURL(){
 $pageURL = 'http';
 if($_SERVER["HTTPS"] == "on") { $pageURL .= "s";}
 $pageURL .= "://";
 if($_SERVER["SERVER_PORT"] != "80") {
  $pageURL .= $_SERVER["SERVER_NAME"].":".$_SERVER["SERVER_PORT"].$_SERVER["REQUEST_URI"] ;
 } else {
  $pageURL .= $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"] ;
 }
 return $pageURL;
}
// returns whole URL

function curPageName(){
 return substr($_SERVER["SCRIPT_NAME"],strrpos($_SERVER["SCRIPT_NAME"],"/")+1);
}
// just the page name 

function curPageQUERY(){
 $url = curPageURL();
 return  parse_url($url , PHP_URL_QUERY);
} 
// current page args/vars  stuff after the '?' in URI , handy if POST data is lost on your server 
 
$str = curPageQUERY();
parse_str($str); 
 

if ($_SERVER["REQUEST_METHOD"] == "POST")
{ // do stuff if request was of a POST 
   // your PHP server may clear the post global too quick . 
   // so see fucntions below to get the post VARS 

if ($key != "key7894561230" )
{ die("bad key"); } // if not our key , you are not worth processing further . 

// for origin management only if a incomming key was cool  
// still specific filters exist for subdomains and ports .
//header("access-control-allow-origin: *"); << wide open
// filterd access control   , see if allowable domains , or parts of dmains exist in the $http_origin string
// if yes then set the allow to this $http_origin .
if( preg_match( "/localhost/i" ,  $http_origin ) || preg_match( "/yourdomain.com/i" ,  $http_origin ) )
{	// there can be no echo calls before this header or it wont work and could throw a PHP  error  
	header("access-control-allow-origin: $http_origin");
	echo "Debug: yep:"; // safe to echo now. 
} else { echo  $http_origin . PHP_EOL ;
die(" bad origin "  ); } // if not , not worth processing below .

?>