This is very insecure, these headers should not be set in this manner.