Title: Bug with WP Favorite Posts plugin
Last modified: August 22, 2016

---

# Bug with WP Favorite Posts plugin

 *  Resolved [Vakula](https://wordpress.org/support/users/vakula/)
 * (@vakula)
 * [11 years, 9 months ago](https://wordpress.org/support/topic/bug-with-wp-favorite-posts-plugin/)
 * In the log file of NinjaFirewall (WP edition) I have found:
 * 11/Sep/14 15:55:49 #7152708 high 152 23.31.27.144 GET /index.php – HTTP header
   injection (CR/LF) – [COOKIE:wp-favorite-posts = added%0aadded]
 * This occurs when a user add or remove the favorite post use the “[WP Favorite Posts](https://wordpress.org/plugins/wp-favorite-posts/)”
   plugin. Please resolve this is bug.
 * Thank you!
 * [https://wordpress.org/plugins/ninjafirewall/](https://wordpress.org/plugins/ninjafirewall/)

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [nintechnet](https://wordpress.org/support/users/nintechnet/)
 * (@nintechnet)
 * [11 years, 9 months ago](https://wordpress.org/support/topic/bug-with-wp-favorite-posts-plugin/#post-5281669)
 * Hi,
 * This is not a bug, but your plugin is adding CR/LF characters to the cookie.
   
   Go to “NinjaFirewal > Rules Editor”, and select rule 152 from the “Total rules
   enabled” menu and then click on “Disable it”.
 *  Thread Starter [Vakula](https://wordpress.org/support/users/vakula/)
 * (@vakula)
 * [11 years, 9 months ago](https://wordpress.org/support/topic/bug-with-wp-favorite-posts-plugin/#post-5281737)
 * Thank you for the reply. If I disable this rule – it is bad for security of site?
 *  Plugin Author [nintechnet](https://wordpress.org/support/users/nintechnet/)
 * (@nintechnet)
 * [11 years, 9 months ago](https://wordpress.org/support/topic/bug-with-wp-favorite-posts-plugin/#post-5281758)
 * It will not make your site unsafe.
    Your plugin adds a line feed character (%
   0a) inside the cookie value, which is a bit unusual, and the main goal of that
   rule is too block such behavior because it might be used for injecting code into
   HTTP headers.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Bug with WP Favorite Posts plugin’ is closed to new replies.

 * ![](https://ps.w.org/ninjafirewall/assets/icon-256x256.png?rev=976137)
 * [NinjaFirewall (WP Edition) - Advanced Security Plugin and Firewall](https://wordpress.org/plugins/ninjafirewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ninjafirewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ninjafirewall/)
 * [Active Topics](https://wordpress.org/support/plugin/ninjafirewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ninjafirewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ninjafirewall/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [nintechnet](https://wordpress.org/support/users/nintechnet/)
 * Last activity: [11 years, 9 months ago](https://wordpress.org/support/topic/bug-with-wp-favorite-posts-plugin/#post-5281758)
 * Status: resolved