GET https://aljerom.shop.sportelement.ru/?file=php%3A%2F%2Ffilter%2Fread%3Dconvert.base64-encode%2Fresource%3D%2Fetc%2Fpasswd

Response
200 OK
IP
216.73.217.115
Profiled on
Token
ff66c6

StorefrontController :: index

Request

GET Parameters

Key Value
file 
"php://filter/read=convert.base64-encode/resource=/etc/passwd"

POST Parameters

No POST parameters

Uploaded Files

No uploaded files

Request Attributes

Key Value
_controller 
[
  "App\Shop\Infrastructure\Controller\StorefrontController"
  "index"
]
_controller_attributes 
[]
_request.unique.id 
"01a1b25d-6227-7603-94e8-8ca4b674666e"
_route 
"storefront_entry"
_route_params 
[
  "params" => ""
  "alias" => "aljerom"
]
_stopwatch_token 
"1f4528"
alias 
"aljerom"
params 
""
tenant_info 
App\Shared\Domain\ValueObject\TenantInfo {#125
  +tenantId: "aljerom"
}

Request Headers

Header Value
accept 
"*/*"
accept-encoding 
"gzip, br, zstd, deflate"
host 
"aljerom.shop.sportelement.ru"
user-agent 
"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
via 
"2.0 Caddy"
x-forwarded-for 
"216.73.217.115"
x-forwarded-host 
"aljerom.shop.sportelement.ru"
x-forwarded-proto 
"https"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Retry Command

curl \
  --compressed \
  --url 'https://aljerom.shop.sportelement.ru/?file=php%3A%2F%2Ffilter%2Fread%3Dconvert.base64-encode%2Fresource%3D%2Fetc%2Fpasswd' \
  --header 'X-Forwarded-Proto: https' \
  --header 'X-Forwarded-Host: aljerom.shop.sportelement.ru' \
  --header 'X-Forwarded-For: 216.73.217.115' \
  --header 'Via: 2.0 Caddy' \
  --header 'Accept-Encoding: gzip, br, zstd, deflate' \
  --header 'Accept: */*' \
  --header 'User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)' \
  --header 'X-Php-Ob-Level: 1'

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Fri, 06 Nov 2026 19:37:06 GMT"
set-cookie 
"cartId=01M6S5TRH9GBA5D6E3VKVT1TXE; expires=Sun, 06 Dec 2026 19:37:06 GMT; Max-Age=2592000; path=/; domain=aljerom.shop.sportelement.ru; secure; httponly; samesite=lax"
x-debug-token 
"ff66c6"
x-robots-tag 
"noindex"

Cookies

Request Cookies

No request cookies

Response Cookies

Key Value
cartId 
Symfony\Component\HttpFoundation\Cookie {#326
  #expire: 1796585826
  #path: "/"
  -sameSite: "lax"
  -secureDefault: true
  #name: "cartId"
  #value: "01M6S5TRH9GBA5D6E3VKVT1TXE"
  #domain: "aljerom.shop.sportelement.ru"
  #secure: true
  #httpOnly: true
  -raw: false
  -partitioned: false
}

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
API_ACCESS_TOKEN 
"Hfu&92.$2hkIN70%w-kjht&ih(P07t__rOiyw76"
APP_DOMAIN_NAME 
"shop.sportelement.ru"
APP_ENV 
"dev"
APP_JWT_ALGO 
"HS256"
APP_JWT_SECRET 
"j2w3T!?*1t0o5K4e7Nmag5GIc_8pRO9"
APP_SECRET 
"a11abc0faa0cacf1c2bf41221a1ff45042"
APP_TIMEZONE 
"Europe/Moscow"
ASK_TOKEN 
"prod-7f2e8a1c9b4d92njYX"
DATABASE_HOST 
"pg"
DATABASE_NAME 
"shop"
DATABASE_PASSWORD 
"shop24"
DATABASE_URL 
"postgresql://shop:shop24@pg:5432/shop?serverVersion=17&charset=utf8"
DATABASE_USER 
"shop"
FLARE_ON 
"0"
LOCK_DSN 
"flock"
MAILER_DSN 
"null://null"
MESSENGER_TRANSPORT_DSN 
"amqp://rabbit:ubuntu34@rabbitmq:5672/%2f/messages"
PROM_METRICS_DSN 
"apcu"
REDIS_HOST 
"redis"
REDIS_PORT 
"6379"
SHOP_DOMAIN_SUFFIX 
"shop.sportelement.ru"
TELEGRAM_BOT_NAME 
"MetashopServiceBot"
TELEGRAM_BOT_TOKEN 
"8544450084:AAFYVjrmFBn5aE-Au2RVZoSfOXuKyWtKKZo"
TELEGRAM_DSN 
"telegram://8544450084:AAFYVjrmFBn5aE-Au2RVZoSfOXuKyWtKKZo@default?channel=-237741744"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_PROJECT_DIR 
"/var/www/shop"
APP_RUNTIME 
"Symfony\Component\Runtime\SymfonyRuntime"
APP_RUNTIME_OPTIONS 
[
  "project_dir" => "/var/www/shop"
]
CONTENT_LENGTH 
""
CONTENT_TYPE 
""
DOCUMENT_ROOT 
"/var/www/shop/public"
DOCUMENT_URI 
"/index.php"
FCGI_ROLE 
"RESPONDER"
FPM_LOG_LEVEL 
"warning"
GATEWAY_INTERFACE 
"CGI/1.1"
GID 
"1000"
GPG_KEYS 
"AFD8691FDAEDF03BDF6E460563F15A9B715376CA 9D7F99A0CB8F05C8A6958D6256A97AF7600A39A6 0616E93D95AF471243E26761770426E17EBBB3DD"
HOME 
"/home/u1000"
HOSTNAME 
"0a9e3b7b0043"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_ACCEPT_ENCODING 
"gzip, br, zstd, deflate"
HTTP_HOST 
"aljerom.shop.sportelement.ru"
HTTP_USER_AGENT 
"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
HTTP_VIA 
"2.0 Caddy"
HTTP_X_FORWARDED_FOR 
"216.73.217.115"
HTTP_X_FORWARDED_HOST 
"aljerom.shop.sportelement.ru"
HTTP_X_FORWARDED_PROTO 
"https"
MAX_CHILDREN 
"5"
MAX_REQUESTS 
"500"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PATH_INFO 
""
PHPIZE_DEPS 
"autoconf \t\tdpkg-dev dpkg \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkgconf \t\tre2c"
PHP_ASC_URL 
"https://www.php.net/distributions/php-8.4.27.tar.xz.asc"
PHP_CFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_CPPFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_FPM_PATH 
"/usr/local/etc/php-fpm.conf"
PHP_INI_DIR 
"/usr/local/etc/php"
PHP_LDFLAGS 
"-Wl,-O1 -pie"
PHP_SELF 
"/index.php"
PHP_SHA256 
"dcf93923b0e38e0d5252b25b796520b5a47761a08b3488b6d0b5d1115764d3f0"
PHP_URL 
"https://www.php.net/distributions/php-8.4.27.tar.xz"
PHP_VERSION 
"8.4"
PWD 
"/var/www"
QUERY_STRING 
"file=php%3A%2F%2Ffilter%2Fread%3Dconvert.base64-encode%2Fresource%3D%2Fetc%2Fpasswd"
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"216.73.217.115"
REMOTE_PORT 
""
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1793993826
REQUEST_TIME_FLOAT 
1793993826.8212
REQUEST_URI 
"/?file=php%3A%2F%2Ffilter%2Fread%3Dconvert.base64-encode%2Fresource%3D%2Fetc%2Fpasswd"
SCRIPT_FILENAME 
"/var/www/shop/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"192.168.17.18"
SERVER_NAME 
"aljerom.shop.sportelement.ru"
SERVER_PORT 
"4443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"Angie/1.12.4"
SHLVL 
"0"
SYMFONY_DOTENV_PATH 
"/var/www/shop/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,APP_TIMEZONE,APP_DOMAIN_NAME,SHOP_DOMAIN_SUFFIX,APP_JWT_ALGO,APP_JWT_SECRET,REDIS_HOST,REDIS_PORT,MESSENGER_TRANSPORT_DSN,MAILER_DSN,LOCK_DSN,TELEGRAM_BOT_NAME,TELEGRAM_DSN,PROM_METRICS_DSN,ASK_TOKEN,DATABASE_HOST,DATABASE_NAME,DATABASE_USER,DATABASE_PASSWORD,DATABASE_URL,API_ACCESS_TOKEN,FLARE_ON,TELEGRAM_BOT_TOKEN"
UID 
"1000"
USER 
"u1000"
WEB_GID 
"1000"
WEB_UID 
"1000"
WWW_CONF_PATH 
"/usr/local/etc/php-fpm.d/www.conf"