the problem is that forum softwares don't allow PHP in the users' signatures
I believe the guy used something like this:
<IMG src="http://hisdomain.com/image.jpg">
but the JPG image was in fact a PHP file, that would open a file at random in the directory and directly send its content over the network. I don't konw if this is feasible, though.