• Resolved bibiska

    (@bibiska)


    Hi!

    Does it make sense (for better protection) to enable the option “Block ASCII control characters 1 to 8 and 14 to 31” ?

    Of course, the logs will be controlled to avoid blocking the necessary functions.

    How significant is this option for site security?

    Thanks

Viewing 1 replies (of 1 total)
  • Plugin Author nintechnet

    (@nintechnet)

    It not really important regarding WordPress vulnerabilities.
    But this policy exists because there have been issues in the past with PHP. For instance it was possible to pass ASCII control characters to the mail() function to modify the email’s header (spoofing). If there were another similar issue, at least NinjaFirewall could block it.

Viewing 1 replies (of 1 total)
  • The topic ‘Block ASCII control characters 1 to 8 and 14 to 31’ is closed to new replies.