Re: [pinhole-discussion] upload gallery
Thanks, I went ahead and upgraded my server, even though it is a pain in the $%@! Thanks for pointing this out! On Friday 01 March 2002 07:13 pm, you wrote: Jeff, there's a description of it here: http://security.e-matters.de/advisories/012002.html At 10:35 AM 2/28/02 -0500, you wrote: Gregg, What was the vulnerability? I allow people to upload and download via PHP scripts on my web site, and probably should tighten up my security... -Jeff On Thu, 28 Feb 2002, Gregg Kemp wrote: Hi all, I have temporarily disabled the ability to upload a file to the list's upload gallery. You can still view everything ok, but you just want be able to upload any new images for a while. I learned today of a bug in the scripting language I use for the uploads that makes the Pinhole Visions web site vulnerable to hackers through file uploads. There is a fix for this bug, but the fix will require some time to implement. I hope to have this fixed this weekend, if possible. Thanks, Gregg ___ Post to the list as PLAIN TEXT only - no HTML Pinhole-Discussion mailing list Pinhole-Discussion@p at ??? unsubscribe or change your account at http://www.???/discussion/ ___ Post to the list as PLAIN TEXT only - no HTML Pinhole-Discussion mailing list Pinhole-Discussion@p at ??? unsubscribe or change your account at http://www.???/discussion/ _ Pinhole Visions at http://www.??? Worldwide Pinhole Photograhy Day at http://www.pinholeday.org ___ Post to the list as PLAIN TEXT only - no HTML Pinhole-Discussion mailing list Pinhole-Discussion@p at ??? unsubscribe or change your account at http://www.???/discussion/
Re: [pinhole-discussion] upload gallery
Jeff, there's a description of it here: http://security.e-matters.de/advisories/012002.html At 10:35 AM 2/28/02 -0500, you wrote: Gregg, What was the vulnerability? I allow people to upload and download via PHP scripts on my web site, and probably should tighten up my security... -Jeff On Thu, 28 Feb 2002, Gregg Kemp wrote: Hi all, I have temporarily disabled the ability to upload a file to the list's upload gallery. You can still view everything ok, but you just want be able to upload any new images for a while. I learned today of a bug in the scripting language I use for the uploads that makes the Pinhole Visions web site vulnerable to hackers through file uploads. There is a fix for this bug, but the fix will require some time to implement. I hope to have this fixed this weekend, if possible. Thanks, Gregg ___ Post to the list as PLAIN TEXT only - no HTML Pinhole-Discussion mailing list Pinhole-Discussion@p at ??? unsubscribe or change your account at http://www.???/discussion/ ___ Post to the list as PLAIN TEXT only - no HTML Pinhole-Discussion mailing list Pinhole-Discussion@p at ??? unsubscribe or change your account at http://www.???/discussion/ _ Pinhole Visions at http://www.??? Worldwide Pinhole Photograhy Day at http://www.pinholeday.org
RE: [pinhole-discussion] upload gallery
The upload page has been restored to the upload gallery. http://www.???/discussion/ For those interested in the details, a major security hole was discovered in the PHP scripting language that is used throughout the Pinhole Visions web site. The bug was in the file upload functions of PHP. An update to this serious bug was provided by the PHP development community within hours of the discovery, and Pair Networks, the web service provider that I use installed the update, also within hours. I've been with Pair for nearly 5 years and can't say enough good things about them. On the flip side, since the upgrade was a major jump from the previous version that was running, there may be side effects of the change that could break other things on the site. So, if anyone notices any problems on the PV site, I would be grateful if you would send me an email at gregg.kemp@??? (rather than posting to the list). Thanks, Gregg -Original Message- From: Gregg Kemp [mailto:gregg.k...@sas.com] Sent: Thursday, February 28, 2002 10:19 AM To: 'pinhole-discussion@p at ???' Subject: [pinhole-discussion] upload gallery Hi all, I have temporarily disabled the ability to upload a file to the list's upload gallery. You can still view everything ok, but you just want be able to upload any new images for a while. I learned today of a bug in the scripting language I use for the uploads that makes the Pinhole Visions web site vulnerable to hackers through file uploads. There is a fix for this bug, but the fix will require some time to implement. I hope to have this fixed this weekend, if possible. Thanks, Gregg
Re: [pinhole-discussion] upload gallery
Gregg, What was the vulnerability? I allow people to upload and download via PHP scripts on my web site, and probably should tighten up my security... -Jeff On Thu, 28 Feb 2002, Gregg Kemp wrote: Hi all, I have temporarily disabled the ability to upload a file to the list's upload gallery. You can still view everything ok, but you just want be able to upload any new images for a while. I learned today of a bug in the scripting language I use for the uploads that makes the Pinhole Visions web site vulnerable to hackers through file uploads. There is a fix for this bug, but the fix will require some time to implement. I hope to have this fixed this weekend, if possible. Thanks, Gregg ___ Post to the list as PLAIN TEXT only - no HTML Pinhole-Discussion mailing list Pinhole-Discussion@p at ??? unsubscribe or change your account at http://www.???/discussion/
RE: [pinhole-discussion] upload
I'm sorry I didn;t get to see that show... andy -Original Message- From: pinhole-discussion-admin@p at ??? [mailto:pinhole-discussion-admin@p at ???]On Behalf Of Bill Erickson Sent: Tuesday, January 22, 2002 3:20 PM To: pinhole-discussion@p at ??? Subject: Re: [pinhole-discussion] upload I just do the usual calulations and apply the usual reciprocity corrections. I once spent more than a year composing an entire 40 print show of multiple exposures (lens, not pinhole.) mostly color negative film. In that context I just multiplied the film speed by the number of exposures per frame. Got good exposure density results. Compositions depended on the relationship between light and shadow areas in each exposure. With pinhole I tend to just overexpose and correct in printing. - Original Message - From: ragowaring To: pinhole-discussion@p at ??? Sent: Tuesday, January 22, 2002 2:39 AM Subject: Re: [pinhole-discussion] upload A beautiful photograph I wonder if you remember the time at each exposure and go through the same or a similar process for other images. I think this is one of the strong points about pinhole - multiple exposure. What time does the T Max 400 need for such exposures? I am thinking of using film in addition to the paper I use at the moment and am wondering what difference this will make in a practical sense. I have uploaded a photograph I took during a residency I was on recently and used one of the props the students were using during lunch time. The exposures were all calculated guesswork ranging from a third to half the total expsure. There were three exposures on the paper in all. As you can see, it is a self portrait. Alexis on 21/1/02 8:26 pm, Bill Erickson at erick...@hickorytech.net wrote: I uploaded the results of an accident: www.???/discussion/upload/gallery2002.php?pic=achagower.jpg http://www.???/discussion/upload/gallery2002.php?pic=achagow er.jpg The figures are in a cemetery in the village of Achagower, in County Mayo, Ireland, but the tombstones are at Kilgeever Abbey, thirty miles south. I was shooting 8x10 Tmax 400 and mistakenly did a double exposure. I never ever discard apparent mistakes without loking at them carefully, or even printing them just to see what i really have. This is a gift of the gods. The other thing I learned from this trip was that I can shoot 8x10 and then just cut the good image out of the negative. I've been using this set of images from ireland to cut my teeth on platinum printing, with good enough results so far.
RE: [pinhole-discussion] upload
now that's not nice at allbesides you are in HTML mode again... andy -Original Message- From: pinhole-discussion-admin@p at ??? [mailto:pinhole-discussion-admin@p at ???]On Behalf Of Bill Erickson Sent: Tuesday, January 22, 2002 3:22 PM To: pinhole-discussion@p at ??? Subject: Re: [pinhole-discussion] upload Is it fortune favors the brave, chance favors only the prepared mind or 'even a blind squirrel will occasionally find a nut? - Original Message - From: Kosinski Family To: pinhole-discussion@p at ??? Sent: Tuesday, January 22, 2002 7:07 AM Subject: Re: [pinhole-discussion] upload Bill writes: I uploaded the results of an accident.. This is a gift of the gods... Hey dude, a gift of the gods is not an accident!
Re: [pinhole-discussion] upload
Re: [pinhole-discussion] uploadIn any case, is definitely NOT a broken clock is right twice a day. - Original Message - From: Bill Erickson To: pinhole-discussion@p at ??? Sent: Tuesday, January 22, 2002 2:21 PM Subject: Re: [pinhole-discussion] upload Is it fortune favors the brave, chance favors only the prepared mind or 'even a blind squirrel will occasionally find a nut? - Original Message - From: Kosinski Family To: pinhole-discussion@p at ??? Sent: Tuesday, January 22, 2002 7:07 AM Subject: Re: [pinhole-discussion] upload Bill writes: I uploaded the results of an accident.. This is a gift of the gods... Hey dude, a gift of the gods is not an accident!
Re: [pinhole-discussion] upload
Re: [pinhole-discussion] uploadIs it fortune favors the brave, chance favors only the prepared mind or 'even a blind squirrel will occasionally find a nut? - Original Message - From: Kosinski Family To: pinhole-discussion@p at ??? Sent: Tuesday, January 22, 2002 7:07 AM Subject: Re: [pinhole-discussion] upload Bill writes: I uploaded the results of an accident.. This is a gift of the gods... Hey dude, a gift of the gods is not an accident!
Re: [pinhole-discussion] upload
Re: [pinhole-discussion] uploadI just do the usual calulations and apply the usual reciprocity corrections. I once spent more than a year composing an entire 40 print show of multiple exposures (lens, not pinhole.) mostly color negative film. In that context I just multiplied the film speed by the number of exposures per frame. Got good exposure density results. Compositions depended on the relationship between light and shadow areas in each exposure. With pinhole I tend to just overexpose and correct in printing. - Original Message - From: ragowaring To: pinhole-discussion@p at ??? Sent: Tuesday, January 22, 2002 2:39 AM Subject: Re: [pinhole-discussion] upload A beautiful photograph I wonder if you remember the time at each exposure and go through the same or a similar process for other images. I think this is one of the strong points about pinhole - multiple exposure. What time does the T Max 400 need for such exposures? I am thinking of using film in addition to the paper I use at the moment and am wondering what difference this will make in a practical sense. I have uploaded a photograph I took during a residency I was on recently and used one of the props the students were using during lunch time. The exposures were all calculated guesswork ranging from a third to half the total expsure. There were three exposures on the paper in all. As you can see, it is a self portrait. Alexis on 21/1/02 8:26 pm, Bill Erickson at erick...@hickorytech.net wrote: I uploaded the results of an accident: www.???/discussion/upload/gallery2002.php?pic=achagower.jpg http://www.???/discussion/upload/gallery2002.php?pic=achagower.jpg The figures are in a cemetery in the village of Achagower, in County Mayo, Ireland, but the tombstones are at Kilgeever Abbey, thirty miles south. I was shooting 8x10 Tmax 400 and mistakenly did a double exposure. I never ever discard apparent mistakes without loking at them carefully, or even printing them just to see what i really have. This is a gift of the gods. The other thing I learned from this trip was that I can shoot 8x10 and then just cut the good image out of the negative. I've been using this set of images from ireland to cut my teeth on platinum printing, with good enough results so far.
Re: [pinhole-discussion] upload
Re: [pinhole-discussion] uploadBill writes: I uploaded the results of an accident.. This is a gift of the gods... Hey dude, a gift of the gods is not an accident!
Re: [pinhole-discussion] upload
A beautiful photograph I wonder if you remember the time at each exposure and go through the same or a similar process for other images. I think this is one of the strong points about pinhole - multiple exposure. What time does the T Max 400 need for such exposures? I am thinking of using film in addition to the paper I use at the moment and am wondering what difference this will make in a practical sense. I have uploaded a photograph I took during a residency I was on recently and used one of the props the students were using during lunch time. The exposures were all calculated guesswork ranging from a third to half the total expsure. There were three exposures on the paper in all. As you can see, it is a self portrait. Alexis on 21/1/02 8:26 pm, Bill Erickson at erick...@hickorytech.net wrote: I uploaded the results of an accident: www.???/discussion/upload/gallery2002.php?pic=achagower.jpg http://www.???/discussion/upload/gallery2002.php?pic=achagow er.jpg The figures are in a cemetery in the village of Achagower, in County Mayo, Ireland, but the tombstones are at Kilgeever Abbey, thirty miles south. I was shooting 8x10 Tmax 400 and mistakenly did a double exposure. I never ever discard apparent mistakes without loking at them carefully, or even printing them just to see what i really have. This is a gift of the gods. The other thing I learned from this trip was that I can shoot 8x10 and then just cut the good image out of the negative. I've been using this set of images from ireland to cut my teeth on platinum printing, with good enough results so far.
Re: [pinhole-discussion] upload
Without a doubt, that is a fantastic image! tim This is a multi-part message in MIME format. I uploaded the results of an accident: www.???/discussion/upload/gallery2002.php? pic=achagower.jpg The figures are in a cemetery in the village of Achagower, in County Mayo, Ireland, but the tombstones are at Kilgeever Abbey, thirty miles south. I was shooting 8x10 Tmax 400 and mistakenly did a double exposure. I never ever discard apparent mistakes without loking at them carefully, or even printing them just to see what i really have. This is a gift of the gods. The other thing I learned from this trip was that I can shoot 8x10 and then just cut the good image out of the negative. I've been using this set of images from ireland to cut my teeth on platinum printing, with good enough results so far. Timothy S. Midkiff Photographers get a Click out of life! ku...@vci.net psycho_...@excite.com
Re: [pinhole-discussion] upload
In a message dated 1/21/02 8:13:01 PM, aschm...@warwick.net writes: The Gods have shined on you...great photograph.. Ditto!!! Good Bless the happy accident. leezy
RE: [pinhole-discussion] upload
The Gods have shined on you...great photograph.. andy -Original Message- From: pinhole-discussion-admin@p at ??? [mailto:pinhole-discussion-admin@p at ???]On Behalf Of Bill Erickson Sent: Monday, January 21, 2002 3:26 PM To: pinhole-discussion@p at ??? Subject: [pinhole-discussion] upload I uploaded the results of an accident: www.???/discussion/upload/gallery2002.php?pic=achagower.jpg The figures are in a cemetery in the village of Achagower, in County Mayo, Ireland, but the tombstones are at Kilgeever Abbey, thirty miles south. I was shooting 8x10 Tmax 400 and mistakenly did a double exposure. I never ever discard apparent mistakes without loking at them carefully, or even printing them just to see what i really have. This is a gift of the gods. The other thing I learned from this trip was that I can shoot 8x10 and then just cut the good image out of the negative. I've been using this set of images from ireland to cut my teeth on platinum printing, with good enough results so far.
Re: [pinhole-discussion] Upload
Hi Guy and Bill, Many thanks for taking the time to comment on the print - it sure helps to get feed-back. Guy, I just started lith printing. Got Rudman's book for Christmas, after I had gotten off to a false start with Edwal Lith-F Developer. I am still on my first pack of Forte Polywarmtone Paper, and of course constantly amazed and at times frustrated by the wondrous tonal ranges I am ending up with. chris --- http://ChristianHarkness.tripod.com Join 18 million Eudora users by signing up for a free Eudora Web-Mail account at http://www.eudoramail.com
Re: [pinhole-discussion] Upload
very nice! It's fun to see images where the artist clearly visualized in advance what they wanted to accomplish, and did so. - Original Message - From: Christian Harkness chris.harkn...@eudoramail.com To: pinhole-discussion@p at ??? Sent: Saturday, January 05, 2002 7:32 AM Subject: [pinhole-discussion] Upload Hi, I just uploaded: 'HandsChristine1' http://www.???/discussion/upload/gallery2002.php?pic=handschr istine1.jpg It is a portion of an 11x14 lith print I just made from a 35mm pinhole neg. [Forte Polywarmtone RC] Best - chris --- http://ChristianHarkness.tripod.com Join 18 million Eudora users by signing up for a free Eudora Web-Mail account at http://www.eudoramail.com ___ Pinhole-Discussion mailing list Pinhole-Discussion@p at ??? unsubscribe or change your account at http://www.???/discussion/
Re: [pinhole-discussion] Upload
Ha! Lith printing and pinholin' together. Absolutely beautiful! Christian, have you been doing lith printing for long? I'd be happy to share experiences. Guy Christian Harkness wrote: Hi, I just uploaded: 'HandsChristine1' http://www.???/discussion/upload/gallery2002.php?pic=handschristine1.jpg It is a portion of an 11x14 lith print I just made from a 35mm pinhole neg. [Forte Polywarmtone RC] Best - chris --- http://ChristianHarkness.tripod.com
