SQL注入问题。 （通过电子邮件验证？）

I was recently been hacked and hackers retrieved all my mailing_list data and I wondered how did they passed the "Validate_email" function and managed to do sql injection?I was recently been hacked and hackers retrieve