/actions/favorites/
../
add.php
remove.php