dvojite pripocitanie

$price = trim($_GET['price']);
$hash  = trim($_GET['hash']);

$query = mysql_query('SELECT * FROM sms WHERE user_hash = "'.$hash.'" LIMIT 1', $conn);
    if(mysql_num_rows($query))
    {
      $zaznam = mysql_fetch_array($query);     
      mysql_query('UPDATE sms SET points = points + 1 WHERE user_hash = "'.$hash.'"', $conn);
    }
    else
    {
      $user_key = substr(md5($hash), 5, 10);
      mysql_query('INSERT INTO sms (points,user_key,user_hash) VALUES (1,"'.$user_key.'","'.$hash.'")', $conn);
    }