Title: HTTP response headers not sent when using a cache plugin
Last modified: August 31, 2016

---

# HTTP response headers not sent when using a cache plugin

 *  Resolved [Michael](https://wordpress.org/support/users/mkalina/)
 * (@mkalina)
 * [10 years, 1 month ago](https://wordpress.org/support/topic/http-response-headers-not-sent-when-using-a-cache-plugin/)
 * I am making use of NF’s “HTTP response headers”-feature. However, I suppose as
   the firewall only loads when php-scripts are being called, these headers are 
   not sent when static pages are requested. This is the case when using a caching-
   module.
 * So I suggest to either inform users of this fact or suggest to write these headers
   into their htaccess (or other files accepting headers-instructions) as this might
   cause confusion.
 * On the other hand, same as you do with “Force SSL for admin and logins”, the 
   http-headers-options should be disabled if these headers are already configured
   elsewhere (eg. htaccess).
 * [https://wordpress.org/plugins/ninjafirewall/](https://wordpress.org/plugins/ninjafirewall/)

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Author [nintechnet](https://wordpress.org/support/users/nintechnet/)
 * (@nintechnet)
 * [10 years, 1 month ago](https://wordpress.org/support/topic/http-response-headers-not-sent-when-using-a-cache-plugin/#post-7296153)
 * Hi
 * I don’t think there is a problem with caching plugins: the firewall “HTTP response
   headers” options are used to protect you, the admin, or anyone else logged in
   and whitelisted. But your caching plugin does/should not cache anything while
   you are logged in, otherwise that would be an important security risk (e.g., 
   it would even cache nonces!). It should only cache the front-end for your visitors.
 *  Thread Starter [Michael](https://wordpress.org/support/users/mkalina/)
 * (@mkalina)
 * [10 years, 1 month ago](https://wordpress.org/support/topic/http-response-headers-not-sent-when-using-a-cache-plugin/#post-7296277)
 * Hi, got it. Thank you!
 * That of course explains the approach you are promoting. However, one point is
   still valid though: If you can find http response headers configured already,
   this option should be disabled.
 * Because now I know that I have to put them somewhere else as I want my https-
   site to also be strengthened for non-admins.
 *  Plugin Author [nintechnet](https://wordpress.org/support/users/nintechnet/)
 * (@nintechnet)
 * [10 years, 1 month ago](https://wordpress.org/support/topic/http-response-headers-not-sent-when-using-a-cache-plugin/#post-7296283)
 * Hi,
 * NinjaFirewall cannot detect the response headers if you enable them at the HTTP
   server level because your HTTP server will add them after NinjaFirewall and PHP
   exit.
    Your HTTP server must check the headers and set/unset them if needed. 
   Both Apache and Nginx can do that.
 *  Thread Starter [Michael](https://wordpress.org/support/users/mkalina/)
 * (@mkalina)
 * [10 years, 1 month ago](https://wordpress.org/support/topic/http-response-headers-not-sent-when-using-a-cache-plugin/#post-7296350)
 * Ok, I thought more in the lines of: you check php.ini, htaccess or any other 
   configuration file for a matching configuration and then disable it. But anyway:
   thank you!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘HTTP response headers not sent when using a cache plugin’ is closed to
new replies.

 * ![](https://ps.w.org/ninjafirewall/assets/icon-256x256.png?rev=976137)
 * [NinjaFirewall (WP Edition) - Advanced Security Plugin and Firewall](https://wordpress.org/plugins/ninjafirewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ninjafirewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ninjafirewall/)
 * [Active Topics](https://wordpress.org/support/plugin/ninjafirewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ninjafirewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ninjafirewall/reviews/)

## Tags

 * [cache](https://wordpress.org/support/topic-tag/cache/)
 * [php](https://wordpress.org/support/topic-tag/php/)

 * 4 replies
 * 2 participants
 * Last reply from: [Michael](https://wordpress.org/support/users/mkalina/)
 * Last activity: [10 years, 1 month ago](https://wordpress.org/support/topic/http-response-headers-not-sent-when-using-a-cache-plugin/#post-7296350)
 * Status: resolved