Error 403 Forbidden

GET http://_/

Request / Response

Request

GET Parameters

None

POST Parameters

None

Uploaded Files

None

Request Attributes

Key Value
_stopwatch_token
"e37d02"

Request Headers

Header Value
accept
"*/*"
user-agent
"masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
x-php-ob-level
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control
"private, must-revalidate"
content-type
"text/html; charset=UTF-8"
date
"Tue, 09 Dec 2025 19:07:03 GMT"
expires
"-1"
pragma
"no-cache"
x-debug-token
"fe549b"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV
"dev"
APP_SECRET
"4821ac1887ce55493bf79b64ef17c412"
BUDGETSMS_API_URL
"https://api.budgetsms.net/sendsms/"
CORS_ALLOW_ORIGIN
"^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$"
DATABASE_FREERADIUS_URL
"mysql://admin:PereiraRocks@[email protected]:3306/radius?serverVersion=8&charset=utf8mb4"
DATABASE_URL
"mysql://openroaming:openroaming@mysql:3306/openroaming?serverVersion=8&charset=utf8mb4"
EMAIL_ADDRESS
"[email protected]"
ENABLE_DELETE_USERS_UI
"OFF"
EXPORT_FREERADIUS_STATISTICS
"OFF"
EXPORT_USERS
"OFF"
GOOGLE_CLIENT_ID
""
GOOGLE_CLIENT_SECRET
""
JWT_PASSPHRASE
""
JWT_PUBLIC_KEY
"%kernel.project_dir%/config/jwt/public.pem"
JWT_SECRET_KEY
"%kernel.project_dir%/config/jwt/private.pem"
MAILER_DSN
"smtps://openroaming%40morfusconnect.com:%240MzERb%[email protected]:465"
MESSENGER_TRANSPORT_DSN
"doctrine://default?auto_setup=0"
METRICS_ALLOWED_IPS
"0.0.0.0/0"
METRICS_ENABLED
"false"
MICROSOFT_CLIENT_ID
""
MICROSOFT_CLIENT_SECRET
""
SAML_IDP_ENTITY_ID
"http://localhost/saml/metadata"
SAML_IDP_SSO_URL
"https://id.example.com/saml2/idp/SSOService.php"
SAML_IDP_X509_CERT
"MIIC..."
SAML_SP_ACS_URL
"https://localhost/saml/acs"
SAML_SP_ENTITY_ID
"https://localhost/saml/metadata"
SENDER_NAME
"OpenRoaming Portal"
SENTRY_DSN
""
TRUSTED_PROXIES
"173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22,2400:cb00::/32,2606:4700::/32,2803:f800::/32,2405:b500::/32,2405:8100::/32,2a06:98c0::/29,2c0f:f248::/32"
TURNSTILE_KEY
"0x4AAAAAABDOTBYUFe6YIxh-"
TURNSTILE_SECRET
"0x4AAAAAABDOTEFLvJAyskPxgQHglKvsWt0"

Defined as regular env variables

Key Value
APP_DEBUG
"1"
CONTENT_LENGTH
""
CONTENT_TYPE
""
DOCUMENT_ROOT
"/var/www/openroaming/public"
DOCUMENT_URI
"/index.php"
FCGI_ROLE
"RESPONDER"
GATEWAY_INTERFACE
"CGI/1.1"
HOME
"/var/www"
HTTP_ACCEPT
"*/*"
HTTP_USER_AGENT
"masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
PHP_SELF
"/index.php"
QUERY_STRING
""
REDIRECT_STATUS
"200"
REMOTE_ADDR
"51.158.205.47"
REMOTE_PORT
"61000"
REQUEST_METHOD
"GET"
REQUEST_SCHEME
"http"
REQUEST_TIME
1765307223
REQUEST_TIME_FLOAT
1765307223.2561
REQUEST_URI
"/"
SCRIPT_FILENAME
"/var/www/openroaming/public/index.php"
SCRIPT_NAME
"/index.php"
SERVER_ADDR
"172.18.0.4"
SERVER_NAME
"_"
SERVER_PORT
"80"
SERVER_PROTOCOL
"HTTP/1.0"
SERVER_SOFTWARE
"nginx/1.18.0"
SYMFONY_DOTENV_PATH
"/var/www/openroaming/.env"
SYMFONY_DOTENV_VARS
"APP_ENV,APP_SECRET,DATABASE_URL,DATABASE_FREERADIUS_URL,MESSENGER_TRANSPORT_DSN,MAILER_DSN,EMAIL_ADDRESS,SENDER_NAME,SAML_IDP_ENTITY_ID,SAML_IDP_SSO_URL,SAML_IDP_X509_CERT,SAML_SP_ENTITY_ID,SAML_SP_ACS_URL,TRUSTED_PROXIES,SENTRY_DSN,GOOGLE_CLIENT_ID,GOOGLE_CLIENT_SECRET,MICROSOFT_CLIENT_ID,MICROSOFT_CLIENT_SECRET,BUDGETSMS_API_URL,EXPORT_USERS,EXPORT_FREERADIUS_STATISTICS,TURNSTILE_KEY,TURNSTILE_SECRET,ENABLE_DELETE_USERS_UI,CORS_ALLOW_ORIGIN,JWT_SECRET_KEY,JWT_PUBLIC_KEY,JWT_PASSPHRASE,METRICS_ENABLED,METRICS_ALLOWED_IPS"
USER
"www-data"