Sindbad~EG File Manager

<?php
ob_start();
include "baglan.php";

$kaynak	    = $_FILES["file"]["tmp_name"];
$dosyaadi	= $_FILES["file"]["name"];
$yol = "../../assets/img/referanslarimiz/";
$yeniad =substr(md5(time()), 0,30);
$uzanti =substr($dosyaadi, -3);
$sonad = $dosyaadi;
$yukle	= move_uploaded_file($kaynak,$yol."/".$sonad);

$sira = $_POST["sira"];
$hizid = $_POST["hizid"];

$kayit = $db->query("insert into hizreferans (sira,hizid,resim)value('$sira','$hizid','$sonad')");

header("Location: ../pages/hizreferans.php?s=".$hizid);
?>