Šmírující tečka

$server = "localhost";
$login = "****";
$heslo = "****";
$databaze = "djpw_stecka"; 
MySQL_Connect($server, $login, $heslo);
MySQL_Select_DB($databaze);
mysql_set_charset("utf8");
$action = $_GET["action"];
if($action == "new"){
        $ip = $_GET["ip"];
        $token = $_GET["token"];
    mysql_query("INSERT INTO `djpw_stecka`.`data` (`token`, `ip`) VALUES ('".mysql_real_escape_string($token)."', '".mysql_real_escape_string($ip)."');");
};
if($action == "view"){
    $ip = $_SERVER['REMOTE_ADDR'];
    $token = $_GET["token"];
    $line = mysql_fetch_array(mysql_query("SELECT * FROM `djpw_stecka`.`data` WHERE `token`='".mysql_real_escape_string($token)."';"));
    if($line["ip"] == $ip){
        mysql_query("UPDATE `djpw_stecka`.`data` SET `showed`='1' WHERE `token`='".mysql_real_escape_string($token)."';");
    };
    if($line["showed"] == 0){
        $file = "no.png";
        header("Content-type: image/png");
        ob_clean();
        flush();
        readfile($file);
        exit;
        
    } elseif($line["showed"] == 1) {
        $file = "yes.png";
        header("Content-type: image/png");
        ob_clean();
        flush();
        readfile($file);
        exit;        
    };
};