added photo as allowed parameter