Two changes

1- Query parameters should be encoded.
2- It's better to use official Facebook API.