Sindbad~EG File Manager

<?php
ob_start();
include "baglan.php";

$id = $_GET["s"];
$hood = $_POST["hood"];
$link = $_POST["link"];
$icerik = $_POST["icerik"];


$kaynak = $_FILES["file"]["tmp_name"];
$dosyaadi = $_FILES["file"]["name"];
$yol = "../../assets/img/kariyerbox/";
$yeniad = substr(md5(time()), 0, 30);
$uzanti = substr($dosyaadi, -3);
$sonad = $dosyaadi;
$yukle = move_uploaded_file($kaynak, $yol . "/" . $sonad);

$stmt = $db->prepare("UPDATE kariyerbox SET hood = :hood, link = :link, icerik = :icerik WHERE id = :id");
	$stmt->bindParam(':hood', $hood, PDO::PARAM_STR);
	$stmt->bindParam(':link', $link, PDO::PARAM_STR);
	$stmt->bindParam(':icerik', $icerik, PDO::PARAM_STR);
	$stmt->bindParam(':id', $id, PDO::PARAM_STR);
	$stmt->execute();


if ($dosyaadi != "") {
    $stmt = $db->prepare("UPDATE kariyerbox SET resim = :resim WHERE id = :id");
    $stmt->bindParam(':resim', $sonad, PDO::PARAM_STR);
    $stmt->bindParam(':id', $id, PDO::PARAM_STR);
    $stmt->execute();
}

header("Location: " . $_SERVER['HTTP_REFERER'] . "");

?>