json_encode escape

passing fb_user_id with malicious code (e.g. </script><script>malicious) could lead to XSS attack.