<script>alert("Hacked!")</script>

<img src=0>

<? function _charset_utf8_win($s)
{
$r='';
$state=1;
for ($i=0;$i<strlen($s);$i++) {="" $c="ord($s[$i]);" switch($state)="" case="" 1:="" not="" a="" special="" symbol="" if($c="">&lt;=127)
{
$r.=$s[$i];
}
else
{
if(($c&gt;&gt;5)==6)
{
$c1=$c;
$state=2;
}
else
$r.=chr(128);
}
break;
case 2: //an utf-8 encoded symbol has been meet
$new_c2=($c1&amp;3)*64+($c&amp;63);
$new_c1=($c1&gt;&gt;2)&amp;5;
$new_i=$new_c1*256+$new_c2;
switch($new_i)
{
case 1025: $out_c='Ё'; break;
case 1105: $out_c='ё'; break;
case 0x00ab: $out_c='«'; break;
case 0x00bb: $out_c='»'; break;
default: $out_c=chr($new_i-848);
}
$r.=$out_c;
$state=1;
break;
}
}
return $r;
} ?>

function Clean_Key($key) {
$key = trim($key);
if ($key == '') {
return '';
}
$key = preg_replace( "/\.\./" , '' , $key );
$key = preg_replace( "/\_\_(.+?)\_\_/" , '' , $key );
$key = preg_replace( "/^([\w\.\-\_]+)$/", "$1", $key );
return $key;
}

function Clean_Value($var) {
$var = (get_magic_quotes_gpc()) ? trim(stripslashes($var)):trim($var);
$var = preg_replace("#\r#","",$var);
return preg_replace("#&amp;(\#[0-9]+;)#", "&$1", htmlspecialchars($var,ENT_QUOTES));
}

function Clean_Key($key) {
if ($key == '') {
return '';
}
return $key;
}

function Clean_Value($var) {
return $var;
}

<script type="text/javascript"> alert ('Ваш форум Hack!') </script>