Sindbad~EG File Manager

<?php
ob_start();
include "baglan.php";

$id = $_GET["s"];
$jobTitle= $_POST["jobTitle"];
$name= $_POST["name"];
$description = $_POST["description"];
$lang = $_POST["lang"];

$kaynak	    = $_FILES["file"]["tmp_name"];
$dosyaadi	= $_FILES["file"]["name"];
$yol = "../../assets/img/ekip/";
$yeniad =substr(md5(time()), 0,30);
$uzanti =substr($dosyaadi, -3);
$sonad = $dosyaadi;
$yukle	= move_uploaded_file($kaynak,$yol."/".$sonad);

//$kaynakTwo	    = $_FILES["fileTwo"]["tmp_name"];
$dosyaadiTwo	= $_FILES["fileTwo"]["name"];
$yolTwo = "../../assets/img/ekip/";
$yeniadTwo =substr(md5(time()), 0,30);
$uzantiTwo =substr($dosyaadiTwo, -3);
$sonadTwo = $dosyaadiTwo;
//$yukleTwo	= move_uploaded_file($kaynakTwo,$yolTwo."/".$sonadTwo);

$stmt = $db->prepare("UPDATE ekip SET name = :name,jobTitle = :jobTitle, description = :description, lang = :lang WHERE id = :id");
$stmt->bindParam(':jobTitle', $jobTitle, PDO::PARAM_STR);
$stmt->bindParam(':name', $name, PDO::PARAM_STR);
$stmt->bindParam(':description', $description, PDO::PARAM_STR);
$stmt->bindParam(':lang', $lang, PDO::PARAM_STR);
$stmt->bindParam(':id', $id, PDO::PARAM_STR);
$stmt->execute();


//if($kaynakTwo != ""){
//
//    $stmt = $db->prepare("UPDATE ekip SET hoverImage = :hoverImage WHERE id = :id");
//    $stmt->bindParam(':hoverImage', $sonadTwo, PDO::PARAM_STR);
//    $stmt->bindParam(':id', $id, PDO::PARAM_STR);
//    $stmt->execute();
//}


if($kaynak != ""){

    $stmt = $db->prepare("UPDATE ekip SET image = :image WHERE id = :id");
    $stmt->bindParam(':image', $sonad, PDO::PARAM_STR);
    $stmt->bindParam(':id', $id, PDO::PARAM_STR);
    $stmt->execute();
}


header("Location: ".$_SERVER['HTTP_REFERER']."");

?>