Aside from the question of whether the request should be denied... The HTTP status “999 Request Denied” is complete nonsense. What is the point of that?