if (!isset($photo_id) || !isNum($photo_id)) {



	fallback("photogallery.php");



} else {



	$result = dbquery(



		"SELECT tp.*, ta.* FROM ".$db_prefix."photos tp



		LEFT JOIN ".$db_prefix."photo_albums ta USING (album_id)



		WHERE photo_id='$photo_id' GROUP BY tp.photo_id



	");



	if (dbrows($result)) {



		$data = dbarray($result);



		if (!checkgroup($data['album_access'])) {



			fallback(FUSION_SELF);



		} else {



			define("PHOTODIR", PHOTOS.(!SAFEMODE ? "album_".$data['album_id']."/" : ""));



			$photo_file = PHOTODIR.$data['photo_filename'];



			echo "<a href=\"javascript:;\" onclick=\"window.close();\"><img src='$photo_file' alt='".$data['photo_filename']."' title='".$locale['458']."' border='0'></a>\n";



		}



	} else {



		echo "<script language='text/javascript'>window.close();</script>\n";



	}



}