9
You can install it anywhere within your web document tree, such as in your XOOPS directory.
If you're security-conscious, place it somewhere nonobvious, such as in a subdirectory with a randomish name like 4935935349344.
Browse to it to get the output, save the output to a .html file on your computer, then delete the script from your server, since the output could be useful to someone trying to hack your site.