Remove undocumented use of $_REQUEST['visibility'] in api_fr_photo_create_update()

- Visibility is inferred from ACL strings

diff --git a/include/api.php b/include/api.php
index 92d35c001ec1b1236e436fa761cfb8b76e73eed5..5131c9574189e5d622b155fc3979e363505873cc 100644 (file)
--- a/include/api.php
+++ b/include/api.php
@@ -4219,7 +4219,7 @@ function api_fr_photo_create_update($type)
        $deny_cid  = $_REQUEST['deny_cid' ] ?? null;
        $allow_gid = $_REQUEST['allow_gid'] ?? null;
        $deny_gid  = $_REQUEST['deny_gid' ] ?? null;
-       $visibility = !empty($_REQUEST['visibility']) && $_REQUEST['visibility'] !== "false";
+       $visibility = !$allow_cid && !$deny_cid && !$allow_gid && !$deny_gid;
 
        // do several checks on input parameters
        // we do not allow calls without album string