levels
0
The client appends the endpoint filenames to this path, so the trailing /database/ stays. Drop it and every request lands on the dashboard instead.
# server alive curl -s https://host/database/ping.php → 1 # level list, raw protocol curl -s https://host/database/getGJLevels21.php?type=4&gameVersion=22 → <levels>#<creators>#<songs>#<total>:<offset>:<size>#<hash>
Unknown names answer the literal -1, never HTML. No status codes, no cookies.
accounts registerGJAccount loginGJAccount updateGJAccSettings20 backupGJAccountNew syncGJAccountNew getAccountURL levels getGJLevels21 downloadGJLevel22 uploadGJLevel21 updateGJDesc20 deleteGJLevelUser20 getGJDailyLevel rateGJStars20 rateGJDemon21 suggestGJStars20 users getGJUserInfo20 updateGJUserScore22 getGJUsers20 getGJCreators19 scores getGJScores20 getGJLevelScores211 uploadGJLevelScore comments getGJComments21 uploadGJComment21 getGJCommentHistory likeGJItem21 misc getGJSongInfo getGJMapPacks21 getGJGauntlets21 getGJChallenges getGJRewards ping
GET /api/stats GET /api/levels?q=temple&type=0&page=0 GET /api/levels/1 GET /api/levels/1/scores GET /api/levels/1/comments GET /api/leaderboard?type=top GET /api/users/1