https://crmtest.herbadoctor.hu/%5c..%5c..%5cetc%5cpasswd?_=bua5h8x2&v=2o82h

Method
GET
HTTP Status
200
IP
45.148.10.119
Profiled on
Token
9e5128

Index :: indexAction

Request

GET Parameters

Key Value
_ 
"bua5h8x2"
v 
"2o82h"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Controller\Index::indexAction"
_firewall_context 
"security.firewall.map.context.main"
_links 
Fig\Link\GenericLinkProvider {#875
  -links: [
    "000000000ce5c2fe0000000063327c8d" => Fig\Link\Link {#874
      -href: "https://crmtest.herbadoctor.hu/api/docs.jsonld"
      -rel: [
        "http://www.w3.org/ns/hydra/core#apiDocumentation" => true
      ]
      -attributes: []
    }
  ]
}
_route 
"home"
_route_params 
[
  "path" => "\..\..\etc\passwd"
]
_stopwatch_token 
"e682a9"
path 
"\..\..\etc\passwd"

Request Headers

Header Value
accept 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"
accept-encoding 
"gzip, deflate, br, zstd"
accept-language 
"en-US,en;q=0.5"
cache-control 
"max-age=0"
cf-connecting-ip 
"172.19.31.33"
cf-ipcountry 
"US"
connection 
"keep-alive"
content-length 
""
content-type 
""
dnt 
"1"
forwarded 
"for=127.0.0.1;host=localhost;proto=http,for=172.19.31.33;proto=https"
host 
"crmtest.herbadoctor.hu"
referer 
"https://www.google.com/"
sec-fetch-dest 
"document"
sec-fetch-mode 
"navigate"
sec-fetch-site 
"none"
sec-fetch-user 
"?1"
true-client-ip 
"172.19.31.33"
upgrade-insecure-requests 
"1"
user-agent 
"Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:127.0) Gecko/20100101 Firefox/127.0"
via 
"1.1 akamai.net"
x-client-ip 
"127.0.0.1"
x-cluster-client-ip 
"127.0.0.1"
x-custom-ip-authorization 
"127.0.0.1"
x-forwarded-for 
"172.19.31.33, 10.118.246.1, 127.0.0.1"
x-forwarded-host 
"localhost"
x-forwarded-server 
"localhost"
x-host 
"localhost"
x-original-url 
"/%5c..%5c..%5cetc%5cpasswd?_=bua5h8x2&v=2o82h"
x-originating-ip 
"127.0.0.1"
x-override-url 
"/%5c..%5c..%5cetc%5cpasswd?_=bua5h8x2&v=2o82h"
x-php-ob-level 
"1"
x-proxyuser-ip 
"127.0.0.1"
x-real-ip 
"172.19.31.33"
x-remote-addr 
"127.0.0.1"
x-remote-ip 
"127.0.0.1"
x-rewrite-url 
"/%5c..%5c..%5cetc%5cpasswd?_=bua5h8x2&v=2o82h"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Sat, 25 Jul 2026 06:42:56 GMT"
link 
"<https://crmtest.herbadoctor.hu/api/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation""
x-debug-token 
"9e5128"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_SECRET 
"8fb331f6229a6399755f723829119a56"
CORS_ALLOW_ORIGIN 
"^https?://crmtest.herbadoctor.hu:?[0-9]*$"
DATABASE_URL 
"mysql://crmtest:2OgxMmeerC3WuBxV@127.0.0.1:3306/crmtest?charset=utf8mb4"
JWT_PASSPHRASE 
"d843a416272132ad33a155d2378545fa"
JWT_PRIVATE_KEY_PATH 
"config/jwt/private.pem"
JWT_PUBLIC_KEY_PATH 
"config/jwt/public.pem"
JWT_TOKEN_TTL 
"25920000"
MAILER_URL 
"null://localhost"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
CONTENT_LENGTH 
""
CONTENT_TYPE 
""
DOCUMENT_ROOT 
"/var/www/html/crmtest/www/public"
DOCUMENT_URI 
"/index.php"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/var/www"
HTTPS 
"on"
HTTP_ACCEPT 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"
HTTP_ACCEPT_ENCODING 
"gzip, deflate, br, zstd"
HTTP_ACCEPT_LANGUAGE 
"en-US,en;q=0.5"
HTTP_CACHE_CONTROL 
"max-age=0"
HTTP_CF_CONNECTING_IP 
"172.19.31.33"
HTTP_CF_IPCOUNTRY 
"US"
HTTP_CONNECTION 
"keep-alive"
HTTP_DNT 
"1"
HTTP_FORWARDED 
"for=127.0.0.1;host=localhost;proto=http,for=172.19.31.33;proto=https"
HTTP_HOST 
"crmtest.herbadoctor.hu"
HTTP_REFERER 
"https://www.google.com/"
HTTP_SEC_FETCH_DEST 
"document"
HTTP_SEC_FETCH_MODE 
"navigate"
HTTP_SEC_FETCH_SITE 
"none"
HTTP_SEC_FETCH_USER 
"?1"
HTTP_TRUE_CLIENT_IP 
"172.19.31.33"
HTTP_UPGRADE_INSECURE_REQUESTS 
"1"
HTTP_USER_AGENT 
"Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:127.0) Gecko/20100101 Firefox/127.0"
HTTP_VIA 
"1.1 akamai.net"
HTTP_X_CLIENT_IP 
"127.0.0.1"
HTTP_X_CLUSTER_CLIENT_IP 
"127.0.0.1"
HTTP_X_CUSTOM_IP_AUTHORIZATION 
"127.0.0.1"
HTTP_X_FORWARDED_FOR 
"172.19.31.33, 10.118.246.1, 127.0.0.1"
HTTP_X_FORWARDED_HOST 
"localhost"
HTTP_X_FORWARDED_SERVER 
"localhost"
HTTP_X_HOST 
"localhost"
HTTP_X_ORIGINAL_URL 
"/%5c..%5c..%5cetc%5cpasswd?_=bua5h8x2&v=2o82h"
HTTP_X_ORIGINATING_IP 
"127.0.0.1"
HTTP_X_OVERRIDE_URL 
"/%5c..%5c..%5cetc%5cpasswd?_=bua5h8x2&v=2o82h"
HTTP_X_PROXYUSER_IP 
"127.0.0.1"
HTTP_X_REAL_IP 
"172.19.31.33"
HTTP_X_REMOTE_ADDR 
"127.0.0.1"
HTTP_X_REMOTE_IP 
"127.0.0.1"
HTTP_X_REWRITE_URL 
"/%5c..%5c..%5cetc%5cpasswd?_=bua5h8x2&v=2o82h"
PATH_INFO 
""
PHP_SELF 
"/index.php"
QUERY_STRING 
"_=bua5h8x2&v=2o82h"
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"45.148.10.119"
REMOTE_PORT 
"13824"
REMOTE_USER 
""
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1784961776
REQUEST_TIME_FLOAT 
1784961776.7544
REQUEST_URI 
"/%5c..%5c..%5cetc%5cpasswd?_=bua5h8x2&v=2o82h"
SCRIPT_FILENAME 
"/var/www/html/crmtest/www/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"37.221.213.69"
SERVER_NAME 
"crmtest.herbadoctor.hu"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"nginx/1.18.0"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,DATABASE_URL,CORS_ALLOW_ORIGIN,JWT_PRIVATE_KEY_PATH,JWT_PUBLIC_KEY_PATH,JWT_PASSPHRASE,JWT_TOKEN_TTL,MAILER_URL"
USER 
"www-data"