Sindbad~EG File Manager

<?php
ob_start();
include "baglan.php";

$g = $_GET["g"];

$veri = $db->prepare("SELECT * FROM tabreferans WHERE id = ?");
$veri->execute(array($g));
$cek = $veri->fetch(PDO::FETCH_OBJ);
$resim = $cek->image;
$silgitsin = "../../img/isortaklari/".$resim;

$sil = $db->prepare("DELETE FROM tabreferans WHERE id = ?");
$sil->execute(array($g));
if($sil->rowCount()){
   echo "başarılı";
 @unlink($silgitsin);
}else{
   echo "hata";
}

header("Location: ".$_SERVER['HTTP_REFERER']."");

?>