Finished up the Photograph Class

- Added delete photo functionality
- Escaped the id to prevent SQL injection