Title: HTTP Response Splitting Attack – Access Denied
Last modified: August 21, 2016

---

# HTTP Response Splitting Attack – Access Denied

 *  Resolved [TareqTujjar](https://wordpress.org/support/users/tareqtujjar/)
 * (@tareqtujjar)
 * [11 years, 9 months ago](https://wordpress.org/support/topic/http-response-splitting-attack-access-denied/)
 * Hello,
 * I am using mod_secure with my Apache server, and configured with the OWSA rules.
   When I go to Abandoned Carts –> Email Templates —> and Edit my Email template-
   > Update Changes, I get error 400. Log shows the following message:
 * ModSecurity: Access denied with code 400 (phase 2). Pattern match “(?:\\bhttp\\/(?:
   0\\.9|1\\.[01])|<(?:html|meta)\\b)” at ARGS:woocommerce_ac_email_body. [file “/
   etc/httpd/modsecurity.d/modsecurity_crs_40_generic_attacks.conf”] [line “213”][
   id “950911”] [msg “HTTP Response Splitting Attack”] [data “<html”] [severity “
   ALERT”] [hostname “XXXXXXXX.com”] [uri “/wp-admin/admin.php”] [unique_id “XXXXXXXXXXXXXXXXX”]
 * For some reason mod_secure it thinking that this is a split html attack, any 
   help?
 * Thanks
 * [https://wordpress.org/plugins/woocommerce-abandoned-cart/](https://wordpress.org/plugins/woocommerce-abandoned-cart/)

Viewing 1 replies (of 1 total)

 *  [bhavik.kiri](https://wordpress.org/support/users/bhavikkiri/)
 * (@bhavikkiri)
 * [11 years, 9 months ago](https://wordpress.org/support/topic/http-response-splitting-attack-access-denied/#post-5144442)
 * Hi,
 * This is the first time any client has reported such an issue, and from what we
   have been able to find online, it is more of a setting issue (with the host) 
   and nothing to do with our plugin
 * So can you please get in touch with your hosting company to see if they can help
   fix the issue.
 * Thanks,
    Bhavik Kiri

Viewing 1 replies (of 1 total)

The topic ‘HTTP Response Splitting Attack – Access Denied’ is closed to new replies.

 * ![](https://ps.w.org/woocommerce-abandoned-cart/assets/icon-256x256.png?rev=2369396)
 * [Abandoned Cart Lite for WooCommerce](https://wordpress.org/plugins/woocommerce-abandoned-cart/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/woocommerce-abandoned-cart/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/woocommerce-abandoned-cart/)
 * [Active Topics](https://wordpress.org/support/plugin/woocommerce-abandoned-cart/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/woocommerce-abandoned-cart/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/woocommerce-abandoned-cart/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [bhavik.kiri](https://wordpress.org/support/users/bhavikkiri/)
 * Last activity: [11 years, 9 months ago](https://wordpress.org/support/topic/http-response-splitting-attack-access-denied/#post-5144442)
 * Status: resolved