Hi,
glad to know it finally works

Permissions:
I will just write the rwx for others, as it's the only one which impacts wipha. You can have anything you want for the user and group permission bits.
I write '?' when it may be on or off.

home: ??x
Sites/wipha: r?x
Pictures: ??x
Pictures/iPhoto Library and all subfolders: ??x
AlbumData.xml and all image files: r?-

You should remove r perm on directories (so you can't list them). You just need x perm, so you can go through them. And you need r perm on files.

So, yes, you grant access to anybody logged on your machine to your photos, if they know the exact path to them, which is possible if they open AlbumData.xml and search for the pathes.
The only way to avoid this is to have apache running as yourself, but  this seems worse imho.

Normally, if changeperm has the good permission, it will automatically, each time you tries to connect to wipha, do the chmod o+x on Pictures, iPhoto Library and subfolders, and chmod o+r on AlbumData.xml and image files.