My solution is another for more security:

on file

inc/shared.inc.php

before

$aNum = db_arr( "SELECT COUNT(`sharePhotoFiles`.`medID`) $sqlFrom $sqlWhere" );
$aNum = db_arr( "SELECT COUNT(`RayMovieFiles`.`ID`) $sqlFrom $sqlWhere" );
$aNum = db_arr( "SELECT COUNT(`RayMusicFiles`.`ID`) $sqlFrom $sqlWhere" );

add

if ($sqlWhere=="") $sqlWhere = " WHERE `Approved`='true' ";

and add in query viewPhoto.php add: AND `sharePhotoFiles`.`Approved`='true'
and see more add in query viewMusic.php add: AND `RayMusicFiles`.`Approved`='true'
and add in query viewVideo.php add: AND `RayMovieFiles`.`Approved`='true'