Edit: HASA is back up.
As you may have noticed already, the site is currently down. This will be resolved as soon as possible. Please check back here for news or check the main site (it may be back before I can update here).
--
Nath
Sunday, April 26, 2009
Saturday, April 4, 2009
HASA news - April 2009
HASA news - April 2009
With March, Back to Middle-earth Month, now behind us, it’s time to erm... stay in Middle-earth a bit longer? A round of applause for everyone who took part, whether you wrote just one or two prompts or managed to do them all, and thanks to the organisers over at SWG for their hard work in thinking up all these prompts!
Birthday Cards
If you have a birthday in April and would like a drabble about your favourite character or topic, you can request it here.
Not sure what the birthday cards are about? Have a look at the stories written for the March requests.
Challenges and Nuzgul
Alas, there are no current open Challenges, but the prospective April Poetry Month Challenge needs just two more people joining in to become a Challenge.
And perhaps you also have an idea you’d like to see written? Grab that nuzgul by the scruff of the neck (mind the teeth!) and see if you can get four others to make it a Challenge?
Prospective Challenges can be found here
Reviews
Right now, there are 15 stories waiting for reviewers (remember to log in first).
If you are an active reviewer, why not go and check one out?
If you’re not an active reviewer, but would like to be one... If you've been a member of HASA for thirty days and think this might be an area you'd like to get involved, it's easy to get started. Read the links below, and then click "Reviews Home" and click on the link to "Activate my status now." You'll be taken to a list of stories awaiting reviewers. Click on the title, read it, and enter your review.
(please note: you need to be logged in for these links to work):
--- Reviews Overview
--- Review Policies
--- Review Criteria
As you can perhaps guess, member participation is crucial for reviews. The more people are involved in the review process, the more opinions will be represented. Having more people involved also means that stories pass through review more quickly - which is good for everyone.
Here's a simple thing to try. You're all familiar with the Golden Rule, "Do unto others as you would have them do unto you." By submitting a story for review, you are asking nine other members to read and evaluate it. So why not do until other authors in reviews as you'd like other reviewers to do unto you: check out one of the stories already in review and give it a read. Put more simply: put one in, take one out.
Forums
Forums are where you will find people discussing research questions and stories.
A quick overview of forum links:
On Our Minds displays the ten most recent posts in forums open to all HASA members. It’s a good way to catch up on what you’ve missed, though the page can move quickly when lots of forums are active at once.
If you've been out of touch for longer than a few days you might want to use the One Month of Posts page. This page is just what it sounds like: a list of forums that have been posted to in the last month, beginning with the most recently updated.
Workshops are specialized writing communities. They allow you to share stories you aren’t ready to post to the whole site, and many have interesting forums attached to them. Explore workshops to find a group of members interested in similar topics. (You must be logged in to see this link).
March Stories
All of us writers love feedback. It is the lembas and miruvor that sustains us as we write our story, and leaving a few words about a story you read is always a nice thing to do, whether the story is new or old.
Every fifteen minutes HASA highlights a story chosen at random from the Reviewed and General stories in the archive. Why not go to http://www.henneth-annun.net/ and read the currently featured story?
Many talented writers are publishing every day. In March:
--- 10 Reviewed Stories
--- 35 General Stories
--- 7 Beta Stories (Remember, you need to be logged in to view beta stories.)
Thank you for reading at HASA. Enjoy!
-Nath-
With March, Back to Middle-earth Month, now behind us, it’s time to erm... stay in Middle-earth a bit longer? A round of applause for everyone who took part, whether you wrote just one or two prompts or managed to do them all, and thanks to the organisers over at SWG for their hard work in thinking up all these prompts!
Birthday Cards
If you have a birthday in April and would like a drabble about your favourite character or topic, you can request it here.
Not sure what the birthday cards are about? Have a look at the stories written for the March requests.
Challenges and Nuzgul
Alas, there are no current open Challenges, but the prospective April Poetry Month Challenge needs just two more people joining in to become a Challenge.
And perhaps you also have an idea you’d like to see written? Grab that nuzgul by the scruff of the neck (mind the teeth!) and see if you can get four others to make it a Challenge?
Prospective Challenges can be found here
Reviews
Right now, there are 15 stories waiting for reviewers (remember to log in first).
If you are an active reviewer, why not go and check one out?
If you’re not an active reviewer, but would like to be one... If you've been a member of HASA for thirty days and think this might be an area you'd like to get involved, it's easy to get started. Read the links below, and then click "Reviews Home" and click on the link to "Activate my status now." You'll be taken to a list of stories awaiting reviewers. Click on the title, read it, and enter your review.
(please note: you need to be logged in for these links to work):
--- Reviews Overview
--- Review Policies
--- Review Criteria
As you can perhaps guess, member participation is crucial for reviews. The more people are involved in the review process, the more opinions will be represented. Having more people involved also means that stories pass through review more quickly - which is good for everyone.
Here's a simple thing to try. You're all familiar with the Golden Rule, "Do unto others as you would have them do unto you." By submitting a story for review, you are asking nine other members to read and evaluate it. So why not do until other authors in reviews as you'd like other reviewers to do unto you: check out one of the stories already in review and give it a read. Put more simply: put one in, take one out.
Forums
Forums are where you will find people discussing research questions and stories.
A quick overview of forum links:
On Our Minds displays the ten most recent posts in forums open to all HASA members. It’s a good way to catch up on what you’ve missed, though the page can move quickly when lots of forums are active at once.
If you've been out of touch for longer than a few days you might want to use the One Month of Posts page. This page is just what it sounds like: a list of forums that have been posted to in the last month, beginning with the most recently updated.
Workshops are specialized writing communities. They allow you to share stories you aren’t ready to post to the whole site, and many have interesting forums attached to them. Explore workshops to find a group of members interested in similar topics. (You must be logged in to see this link).
March Stories
All of us writers love feedback. It is the lembas and miruvor that sustains us as we write our story, and leaving a few words about a story you read is always a nice thing to do, whether the story is new or old.
Every fifteen minutes HASA highlights a story chosen at random from the Reviewed and General stories in the archive. Why not go to http://www.henneth-annun.net/ and read the currently featured story?
Many talented writers are publishing every day. In March:
--- 10 Reviewed Stories
--- 35 General Stories
--- 7 Beta Stories (Remember, you need to be logged in to view beta stories.)
Thank you for reading at HASA. Enjoy!
-Nath-
Monday, March 9, 2009
Donations for April site hosting needed
HASA is an ad-free, fee-free Web site, run for the enjoyment of quality JRRT fanfiction. Our monthly hosting costs are $150 US. Thank you to generous site users who donated last month, and in previous months. Currently our balance is at $73.35, which means we will need donations to pay the April hosting bill. The due date is April 8th. If you look down at the bottom of any HASA page you will see a message, "Visitors Currently Online". As I write this it's at 125 visitors, which is a nice number. If a fraction of that number can donate $5 each we will be funded for next month. I'll keep you informed.
Thanks for enjoying HASA,
Julie
Thanks for enjoying HASA,
Julie
Tuesday, March 3, 2009
HASA news - March 2009
March is Back to Middle-earth Month. The Silmarillion Writers Guild is posting daily prompts at their site. Why not go over and participate? (and of course post the results at HASA *g*)
Birthday Cards
If you have a birthday in March and would like a drabble about your favourite character or topic, you can request it here.
Not sure what the birthday cards are about? Have a look at the stories written for previous requests.
Challenges and Nuzgul
Alas, there are no current open Challenges, but perhaps you have ideas you’d like to see written? Grab that nuzgul by the scruff of the neck (mind the teeth!) and see if you can get four others to make it a Challenge?
Prospective Challenges can be found here
Resources
The HASA Research Library is a very useful resource for writers as well as for online discussions on book canon. You can find entries on characters, settings, events, and items, containing cited quotes about the item you are trying to find more information on. This portion of the site is available here.
Would you like to get involved with Resources? If you like researching and want to help develop this section of HASA you can contact the Resources & Research Library through the contact form at http://www.henneth-annun.net/about/contact.cfm.
Some recent articles in Resources:
Timeline Events:
Frodo and Sam set off for Mordor
Éomer pursues the Orc-raiders towards Fangorn
Character Biographies
Nerdanel
Isengrim Took II
Places
Argonath
Caragdûr
Things
Shire-reckoning
Shire-reform
Good luck researching your story! If you enjoy this section of the site, why not tell the researchers (they’re listed at the bottom of every entry).
February Stories
All of us writers love feedback. It is the lembas and miruvor that sustains us as we write our story, and leaving a few words about a story you read is always a nice thing to do, whether the story is new or old.
Every fifteen minutes HASA highlights a story chosen at random from the Reviewed and General stories in the archive. Why not go to http://www.henneth-annun.net/ and read the currently featured story?
Many talented writers are publishing every day. In February:
--- 26 Reviewed Stories were published or updated.
--- 54 General Stories were published or updated.
--- 4 Beta Stories were published or updated.
(Please note, you need to be logged in to view beta stories.)
Thank you for reading at HASA. Enjoy!
March is Back to Middle-earth Month. The Silmarillion Writers Guild is posting daily prompts at their site. Why not go over and participate? (and of course post the results at HASA *g*)
Birthday Cards
If you have a birthday in March and would like a drabble about your favourite character or topic, you can request it here.
Not sure what the birthday cards are about? Have a look at the stories written for previous requests.
Challenges and Nuzgul
Alas, there are no current open Challenges, but perhaps you have ideas you’d like to see written? Grab that nuzgul by the scruff of the neck (mind the teeth!) and see if you can get four others to make it a Challenge?
Prospective Challenges can be found here
Resources
The HASA Research Library is a very useful resource for writers as well as for online discussions on book canon. You can find entries on characters, settings, events, and items, containing cited quotes about the item you are trying to find more information on. This portion of the site is available here.
Would you like to get involved with Resources? If you like researching and want to help develop this section of HASA you can contact the Resources & Research Library through the contact form at http://www.henneth-annun.net/about/contact.cfm.
Some recent articles in Resources:
Timeline Events:
Frodo and Sam set off for Mordor
Éomer pursues the Orc-raiders towards Fangorn
Character Biographies
Nerdanel
Isengrim Took II
Places
Argonath
Caragdûr
Things
Shire-reckoning
Shire-reform
Good luck researching your story! If you enjoy this section of the site, why not tell the researchers (they’re listed at the bottom of every entry).
February Stories
All of us writers love feedback. It is the lembas and miruvor that sustains us as we write our story, and leaving a few words about a story you read is always a nice thing to do, whether the story is new or old.
Every fifteen minutes HASA highlights a story chosen at random from the Reviewed and General stories in the archive. Why not go to http://www.henneth-annun.net/ and read the currently featured story?
Many talented writers are publishing every day. In February:
--- 26 Reviewed Stories were published or updated.
--- 54 General Stories were published or updated.
--- 4 Beta Stories were published or updated.
(Please note, you need to be logged in to view beta stories.)
Thank you for reading at HASA. Enjoy!
Tuesday, February 24, 2009
Donations March site hosting needed
HASA is an ad-free, fee-free Web site, run for the enjoyment of quality JRRT fanfiction. Our monthly hosting costs are $150 US. Currently our balance is at $67.67, which means we will need donations to pay the March hosting bill. The due date is March 8th. If you look down at the bottom of any HASA page you will see a message, "Visitors Currently Online". As I write this it's at 144 visitors. If a fraction of that number can donate $5 each we will be funded for next month. I'll keep you informed.
Thanks for enjoying HASA,
Julie
Thanks for enjoying HASA,
Julie
Sunday, February 1, 2009
HASA news - February 2009
Birthday Cards
If you have a birthday in February and would like a drabble about your favourite character or topic, you can request it here.
Not sure what the birthday cards are about? Have a look at the stories written for the January requests.
Challenges and Nuzgul
There are no current open Challenges, but the Unbelievable AU idea only needs 3 more people to make it into one. Take a look and wait for that nibble on the ankle...
Challenges need nuzgul. Have ideas you’d like to see written? Why not take that nuzgul by the scruff of the neck (mind the teeth!) and see if you can get four others to make it a Challenge?
Prospective Challenges can be found here
Reviews
Right now, there are 14 stories waiting for reviewers (remember to log in first).
If you are an active reviewer, why not go and check one out?
If you’re not an active reviewer, but would like to be one... If you've been a member of HASA for thirty days and think this might be an area you'd like to get involved, it's easy to get started. Read the links below, and then click "Reviews Home" and click on the link to "Activate my status now." You'll be taken to a list of stories awaiting reviewers. Click on the title, read it, and enter your review.
(please note: you need to be logged in for these links to work):
--- Reviews Overview
--- Review Policies
--- Review Criteria
As you can perhaps guess, member participation is crucial for reviews. The more people that are involved in the review process, the more opinions will be represented. Having more people involved also means that stories pass through review more quickly - which is good for everyone.
Here's a simple thing to try. You're all familiar with the Golden Rule, "Do unto others as you would have them do unto you." By submitting a story for review, you are asking nine other members to read and evaluate it. So why not do until other authors in reviews as you'd like other reviewers to do unto you: check out one of the stories already in review and give it a read. Put more simply: put one in, take one out.
January Stories
All of us writers love feedback. It is the lembas and miruvor that sustains us as we write our story, and leaving a few words about a story you read is always a nice thing to do, whether the story is new or old.
Every fifteen minutes HASA highlights a story chosen at random from the Reviewed and General stories in the archive. Why not go to http://www.henneth-annun.net/ and read the currently featured story?
Many talented writers are publishing every day. In January:
--- 17 Reviewed Stories
--- 54 General Stories
--- 4 Beta Stories (Please note, you need to be logged in to view beta stories.)
Thank you for reading at HASA. Enjoy!
-Nath-
If you have a birthday in February and would like a drabble about your favourite character or topic, you can request it here.
Not sure what the birthday cards are about? Have a look at the stories written for the January requests.
Challenges and Nuzgul
There are no current open Challenges, but the Unbelievable AU idea only needs 3 more people to make it into one. Take a look and wait for that nibble on the ankle...
Challenges need nuzgul. Have ideas you’d like to see written? Why not take that nuzgul by the scruff of the neck (mind the teeth!) and see if you can get four others to make it a Challenge?
Prospective Challenges can be found here
Reviews
Right now, there are 14 stories waiting for reviewers (remember to log in first).
If you are an active reviewer, why not go and check one out?
If you’re not an active reviewer, but would like to be one... If you've been a member of HASA for thirty days and think this might be an area you'd like to get involved, it's easy to get started. Read the links below, and then click "Reviews Home" and click on the link to "Activate my status now." You'll be taken to a list of stories awaiting reviewers. Click on the title, read it, and enter your review.
(please note: you need to be logged in for these links to work):
--- Reviews Overview
--- Review Policies
--- Review Criteria
As you can perhaps guess, member participation is crucial for reviews. The more people that are involved in the review process, the more opinions will be represented. Having more people involved also means that stories pass through review more quickly - which is good for everyone.
Here's a simple thing to try. You're all familiar with the Golden Rule, "Do unto others as you would have them do unto you." By submitting a story for review, you are asking nine other members to read and evaluate it. So why not do until other authors in reviews as you'd like other reviewers to do unto you: check out one of the stories already in review and give it a read. Put more simply: put one in, take one out.
January Stories
All of us writers love feedback. It is the lembas and miruvor that sustains us as we write our story, and leaving a few words about a story you read is always a nice thing to do, whether the story is new or old.
Every fifteen minutes HASA highlights a story chosen at random from the Reviewed and General stories in the archive. Why not go to http://www.henneth-annun.net/ and read the currently featured story?
Many talented writers are publishing every day. In January:
--- 17 Reviewed Stories
--- 54 General Stories
--- 4 Beta Stories (Please note, you need to be logged in to view beta stories.)
Thank you for reading at HASA. Enjoy!
-Nath-
Friday, January 9, 2009
Donations February site hosting needed
HASA is an ad-free, fee-free Web site, run for the enjoyment of quality JRRT fanfiction. Currently, our monthly hosting costs are $150 US. Currently our balance is at $62.05, which means we will need donations to pay the January hosting bill. The due date is February 8th. If you look down at the bottom of any HASA page you will see a message, "Visitors Currently Online". As I write this, late Friday afternoon, it's at 93 visitors. If a fraction of that number can donate $5 each we will be funded for next month. I'll keep you informed.
Thanks for enjoying HASA,
Julie
Thanks for enjoying HASA,
Julie
Tuesday, December 23, 2008
Happy Holidays
We hope everyone is having a safe & happy season.
Thanks to generous donations January site funding is covered and we have a good start on February! Thanks to everyone who made a donation and thanks to everyone for reading and writing and enjoying HASA.
Julie
Thanks to generous donations January site funding is covered and we have a good start on February! Thanks to everyone who made a donation and thanks to everyone for reading and writing and enjoying HASA.
Julie
Thursday, December 11, 2008
Donations for January site hosting needed
HASA is an ad-free, fee-free Web site, run for the enjoyment of quality JRRT fanfiction. Currently, our monthly hosting costs are $150 US.
Currently our balance is at $48.99, which means we will need donations to pay the December hosting bill, which is due January 8th. If you look down at the bottom of any HASA page you will see a message, "Visitors Currently Online". As I write this it's at 161 visitors. If a fraction of that number who have not donated yet can donate $5 each we will be funded for next month. I'll keep you informed.
To see the HASA donation page, click here: http://www.henneth-annun.net/about/donate.cfm
Thanks for enjoying HASA,
Julie
Currently our balance is at $48.99, which means we will need donations to pay the December hosting bill, which is due January 8th. If you look down at the bottom of any HASA page you will see a message, "Visitors Currently Online". As I write this it's at 161 visitors. If a fraction of that number who have not donated yet can donate $5 each we will be funded for next month. I'll keep you informed.
To see the HASA donation page, click here: http://www.henneth-annun.net/about/donate.cfm
Thanks for enjoying HASA,
Julie
Wednesday, November 12, 2008
We're OK for December!
17 Nov Update: Thanks everyone! With donations from readers & members, we now are covered for December. Thanks very much for reading, enjoying & supporting HASA
Julie
=========
HASA is an ad-free, fee-free Web site, run for the enjoyment of quality JRRT fanfiction. Currently, our monthly hosting costs are $150 US.
Currently our balance is at $42.83, which means we will need donations to pay the December hosting bill, which is due December 8th. If you look down at the bottom of any HASA page you will see a message, "Visitors Currently Online". As I write this it's at 117 visitors. If a fraction of that number can donate $5 each we will be funded for next month. I'll keep you informed.
To see the HASA donation page, click here: http://www.henneth-annun.net/about/donate.cfm
Thanks for enjoying HASA,
Julie
Julie
=========
HASA is an ad-free, fee-free Web site, run for the enjoyment of quality JRRT fanfiction. Currently, our monthly hosting costs are $150 US.
Currently our balance is at $42.83, which means we will need donations to pay the December hosting bill, which is due December 8th. If you look down at the bottom of any HASA page you will see a message, "Visitors Currently Online". As I write this it's at 117 visitors. If a fraction of that number can donate $5 each we will be funded for next month. I'll keep you informed.
To see the HASA donation page, click here: http://www.henneth-annun.net/about/donate.cfm
Thanks for enjoying HASA,
Julie
Thursday, October 16, 2008
Site hosting update: OK for November, Donations for December needed
HASA is an ad-free, fee-free Web site, run for the enjoyment of quality JRRT fanfiction. Currently, our monthly hosting costs are $150 US.
Currently our balance is at $154.21, which means we have November covered, but will need donations for December. If you look down at the bottom of any HASA page you will see a message, "Visitors Currently Online". As I write this it's at 118 visitors. I've seen it over 200 and never under 50. Readers, thanks for visiting and enjoying! Writers, thanks for writing and posting your stories! If a fraction of that number can donate $5 each we will be set for December. I'll keep you informed.
To see the HASA donation page, click here: http://www.henneth-annun.net/about/donate.cfm
Thanks for enjoying HASA,
Julie
Currently our balance is at $154.21, which means we have November covered, but will need donations for December. If you look down at the bottom of any HASA page you will see a message, "Visitors Currently Online". As I write this it's at 118 visitors. I've seen it over 200 and never under 50. Readers, thanks for visiting and enjoying! Writers, thanks for writing and posting your stories! If a fraction of that number can donate $5 each we will be set for December. I'll keep you informed.
To see the HASA donation page, click here: http://www.henneth-annun.net/about/donate.cfm
Thanks for enjoying HASA,
Julie
Friday, September 26, 2008
Site Hosting update
Thanks to recent donations, HASA is funded through November.
HASA is an ad-free, fee-free Web site, run for the enjoyment of quality JRRT fanfiction. Currently, our monthly hosting costs are $150 US.
I am very happy that readers and writers continue to support this site. (As I write this message, “Visitors currently online” is at 123 – a fun number that makes me smile.) If you haven’t yet made a donation, please consider doing so sometime soon. Since November and December are busy months for me, I am hoping that December will be fully funded by the end of October. I will keep you informed.
To see the HASA donation page, click here: http://www.henneth-annun.net/about/donate.cfm
Thanks for enjoying HASA,
Julie
HASA is an ad-free, fee-free Web site, run for the enjoyment of quality JRRT fanfiction. Currently, our monthly hosting costs are $150 US.
I am very happy that readers and writers continue to support this site. (As I write this message, “Visitors currently online” is at 123 – a fun number that makes me smile.) If you haven’t yet made a donation, please consider doing so sometime soon. Since November and December are busy months for me, I am hoping that December will be fully funded by the end of October. I will keep you informed.
To see the HASA donation page, click here: http://www.henneth-annun.net/about/donate.cfm
Thanks for enjoying HASA,
Julie
Thursday, September 18, 2008
Funding update: OK for October, Donations for November needed
HASA is an ad-free, fee-free Web site, run for the enjoyment ofquality JRRT fanfiction. Currently, our monthly hosting costs are$150 US.We have been getting a series of $5 and $10 and $25 donations so thathosting fees for next month are covered. There are stillmatching funds left over for the 3rd quarter challenge that areavailable through September 30th. We still need about $35 forNovember.
If you look down at the bottom of any HASA page you will see amessage, "Visitors Currently Online". As I write this it's at 153 visitors. I've seen it over 200 and never under 50. Readers, thanksfor visiting and enjoying! Writers, thanks for writing and postingyour stories! If just 7 of you can donate $5 each, HASA will be setfor October. If you donate before the end of this month, we may get ahead start on December. I'll keep you informed.
Julie
If you look down at the bottom of any HASA page you will see amessage, "Visitors Currently Online". As I write this it's at 153 visitors. I've seen it over 200 and never under 50. Readers, thanksfor visiting and enjoying! Writers, thanks for writing and postingyour stories! If just 7 of you can donate $5 each, HASA will be setfor October. If you donate before the end of this month, we may get ahead start on December. I'll keep you informed.
To see the HASA donation page, click here: http://www.henneth-annun.net/about/donate.cfm
Julie
Saturday, July 26, 2008
Qtr. 3 Funding Challenge
When checking over the site for problems after the recent attack, I noticed that site hosting donations are a little over $50 short for the August hosting bill due week after next.
I spoke with HASA's Secret Admirer, who generously agreed to do another matching funds challenge!
Our funding goal is $200, which will pay for August and September. Our Secret Admirer will match dollar for dollar up to $200 from now through September 31. This way, every dollar you give is worth $2.
Thank you for your support!
Anglachel
I spoke with HASA's Secret Admirer, who generously agreed to do another matching funds challenge!
Our funding goal is $200, which will pay for August and September. Our Secret Admirer will match dollar for dollar up to $200 from now through September 31. This way, every dollar you give is worth $2.
Thank you for your support!
Anglachel
Friday, July 25, 2008
Site Restored
Beginning in the late afternoon of Monday, July 21, I received emails from a number of HASA site visitors that something was terribly wrong with the site. Because of regulations at my workplace, I had to wait until I got home to view the site. My heart sank when I saw the errors affecting almost every page of the site. It was obviously malicious work, so I shut off the site to prevent further access.
Looking at source code, I saw information that should not have been there - JavaScript snippets, strange URLs, and other text garbage. A quick Google search revealed the problem. There had been a worldwide SQL injection attack on ColdFusion sites that ran on IIS web servers. Many sites had been brought down and a lot of data had been corrupted. Luckily, the attacker had only tried to insert code to convert site links to go to his own web site, and had not tried to delete data or erase databases. The ColdFusion community had responded quickly. By the time I was looking for information, the exact attack had been identified, various clean up scripts had been posted, and I had the tools necessary to fix the database.
What is a SQL injection attack? It is the nastiest, most destructive web site attack out there. In general terms, a coder takes a site form or URL, looks for a variable that appears to be an ID used by a database to locate a record, such as a story. Most database driven web sites work like this. The coder then resends the URL or form with a string of database commands (Structured Query Language statements) and tries to take over your database. If their SQL string is written well enough and if the database under attack is not protected, these commands can do anything from insert text to delete the entire database to (under very rare conditions) take over the server itself.
ColdFusion has a number of features to foil SQL injections right on the server and there are coding practices to help prevent the attacks. Just over a year ago, I had spent a month retrofitting much of the site to protect the main data tables and search functions from attacks. However, real life demanded my attention, and I did not get all the tables protected. Some of the lookup tables, like Story Era, were still vulnerable, and that's where HASA was attacked. In addition, the SQL statement used for the attacks was very sophisticated and bypassed most of the server-level protections.
The first thing to do was assess the damage. I ran some scripts and discovered there were 29 fields in 11 tables where trash data had been inserted. None of them affected the main story, forum, comment or review tables, which was a great relief. Also, non-HASA databases had not been affected, which meant damage was contained. Next, I ran a scrubber on those tables which located the bogus text and stripped it out. The biggest advantage here was that I did not have to run a restore from a backup, which would have lost content added to the site since the time the backup was run.
Data restored, I now had to track down those vulnerability points in the site. That is what has taken so long as every individual page in the site that an external (not logged in) user can reach had to be examined for all database connections and then those connections had to be evaluated for whether they were injection points. After the pages were reviewed, corrections made, and new code posted to a hidden site for the testers to check for bugs, all the forms had to be gone over. Forms are more dangerous than URLs, though more difficult to compromise, because they are the most common way to insert data into a database. The forms were completed yesterday. After that, the revised code was merged with the production code, uploaded again to another protected test area and put through its paces. That went on until pretty late last night.
There are a few glitches left. One form, the Knowledge Base search in the Research Library, could not be fixed and has been taken offline. The index search and all of the individual section lookups the Research Library are working. Also, the pop-up forum window attached to story pages will throw an error message if you try to use it. The Who's Online feature for logged in members does not appear to be working in production. There are a few conditions on a few forms we were not able to reproduce, so it's not 100% certain that they are working.
More testing will continue over the next month to be certain all access points were caught and to fix any bug accidentally introduced during the fixes. If you encounter an error message or you see something that just seems wrong on the site, please use the Contact form and send me an email at Tech Support.
This was the worst technical problem the site has experienced in its seven year history because of the data corruption. We got away with correctable damage, but it could have been much worse had the attacker been trying to destroy data. My deep thanks and appreciation for the site members who alerted me to the attack and provided their assistance to get the site fixed.
Anglachel
Looking at source code, I saw information that should not have been there - JavaScript snippets, strange URLs, and other text garbage. A quick Google search revealed the problem. There had been a worldwide SQL injection attack on ColdFusion sites that ran on IIS web servers. Many sites had been brought down and a lot of data had been corrupted. Luckily, the attacker had only tried to insert code to convert site links to go to his own web site, and had not tried to delete data or erase databases. The ColdFusion community had responded quickly. By the time I was looking for information, the exact attack had been identified, various clean up scripts had been posted, and I had the tools necessary to fix the database.
What is a SQL injection attack? It is the nastiest, most destructive web site attack out there. In general terms, a coder takes a site form or URL, looks for a variable that appears to be an ID used by a database to locate a record, such as a story. Most database driven web sites work like this. The coder then resends the URL or form with a string of database commands (Structured Query Language statements) and tries to take over your database. If their SQL string is written well enough and if the database under attack is not protected, these commands can do anything from insert text to delete the entire database to (under very rare conditions) take over the server itself.
ColdFusion has a number of features to foil SQL injections right on the server and there are coding practices to help prevent the attacks. Just over a year ago, I had spent a month retrofitting much of the site to protect the main data tables and search functions from attacks. However, real life demanded my attention, and I did not get all the tables protected. Some of the lookup tables, like Story Era, were still vulnerable, and that's where HASA was attacked. In addition, the SQL statement used for the attacks was very sophisticated and bypassed most of the server-level protections.
The first thing to do was assess the damage. I ran some scripts and discovered there were 29 fields in 11 tables where trash data had been inserted. None of them affected the main story, forum, comment or review tables, which was a great relief. Also, non-HASA databases had not been affected, which meant damage was contained. Next, I ran a scrubber on those tables which located the bogus text and stripped it out. The biggest advantage here was that I did not have to run a restore from a backup, which would have lost content added to the site since the time the backup was run.
Data restored, I now had to track down those vulnerability points in the site. That is what has taken so long as every individual page in the site that an external (not logged in) user can reach had to be examined for all database connections and then those connections had to be evaluated for whether they were injection points. After the pages were reviewed, corrections made, and new code posted to a hidden site for the testers to check for bugs, all the forms had to be gone over. Forms are more dangerous than URLs, though more difficult to compromise, because they are the most common way to insert data into a database. The forms were completed yesterday. After that, the revised code was merged with the production code, uploaded again to another protected test area and put through its paces. That went on until pretty late last night.
There are a few glitches left. One form, the Knowledge Base search in the Research Library, could not be fixed and has been taken offline. The index search and all of the individual section lookups the Research Library are working. Also, the pop-up forum window attached to story pages will throw an error message if you try to use it. The Who's Online feature for logged in members does not appear to be working in production. There are a few conditions on a few forms we were not able to reproduce, so it's not 100% certain that they are working.
More testing will continue over the next month to be certain all access points were caught and to fix any bug accidentally introduced during the fixes. If you encounter an error message or you see something that just seems wrong on the site, please use the Contact form and send me an email at Tech Support.
This was the worst technical problem the site has experienced in its seven year history because of the data corruption. We got away with correctable damage, but it could have been much worse had the attacker been trying to destroy data. My deep thanks and appreciation for the site members who alerted me to the attack and provided their assistance to get the site fixed.
Anglachel
Sunday, June 29, 2008
HASA Announcement - Reviews
BIRTHDAY CARDS
The following members have birthday this week. If you're in the drabbling mood, why not write them 100 words as a birthday card?
Linaewen (June 17) requested "a tale of pre-Quest Boromir – specifically, a tale of him having an adventure on his way to Rivendell."
The following drabbles have been written in the following week:
Fording the Greyflood by Jay of Lasgalen for Linaewen
Arrival by Larner for Linaewen
And the July thread is up! If you have a birthday in July and would like a drabble about your favorite character or topic, you can request it here.
This Week's Focus:
REVIEWS
The review process is probably one of the trickiest aspects of the HASA website. Here we ask members to decide whether a story should be recognized as examples of outstanding JRRT fanfiction. Whenever something is judged, especially something as subjective as good fanfiction, there is the potential for unfairness and hurt feelings. Members are provided with criteria to consider when evaluating a story, but the final decision in most cases rests with those members who choose to review.
For more on HASA Reviews, check out the following links (you must be logged in):
--- Reviews Overview
--- Review Policies
--- Review Criteria
As you can perhaps guess, member participation is crucial. The more people that are involved in the review process, the more opinions will be represented, and the less impact any one opinion will have on the process. Having more people involved also means that stories pass through review more quickly – which benefits everyone.
If you've been a member of HASA for thirty days and think this might be an area you'd like to get involved, it's easy to get started. Ready the pages I link above, and then click "Reviews Home" and click on the link to "Activate my status now." You'll be taken to a list of stories awaiting reviewers. Click on the title, read it, and enter your review.
Here's a simple thing to try. You're all familiar with the Golden Rule, "Do unto others as you would have them do unto you." By submitting a story for review, you are asking nine other members to read and evaluate it. So why not do until other authors in reviews as you'd like other reviewers to do unto you: check out one of the stories already in review and give it a read. Put more simply: put one in, take one out.
There are currently fourteen stories waiting for reviewers. To whet your appetite, here are a few of the stories you can choose from.
"Here You Cannot Leave Me"
A poem about Arwen's final farewell to Estel.
"A Maid Waiting"
Some who came to Minas Tirith did so in hopes of pursuing a larger ambition. For Systerien of Celebstrand in Dor-en-Ernil and Ivormil of Bidwell in Lossarnach, to find themselves in the presence of the King Returned served to put those ambitions into perspective.
"To Establish Ties"
Gil-Galad meets his future herald for the first time. Drabble.
So go forth and review!
Marta
PS- Do you have something in particular you would like included in next week's announcement? If so, please contact me here.
Sunday, June 22, 2008
HASA Announcement - Stories + Forum Posts
Hey guys,
Due to a mix-up on my part, last week's announcement wasn't posted. Ergo, this week you get all the features that would have been posted last week as well as this week.
No members had birthdays last week or this week. If you're in the drabbling mood, you can still write a drabble for this month's sole birthday baby:
Beruthiel [June 7] requested "a scene between Pippin and Faramir, before Pippin leaves for the battle at the Black Gate."
The following drabble has been written in the following week:
For Want Of... by Larner for Beruthiel
If you have a birthday in June and would like a drabble about your favorite character or topic, you can request it here.
The thread to request drabbles for next month isn't up, but it should be before too much longer. Keep an eye out for it!
Last week's focus:
All of us writers love feedback. It is the lembas and miruvor that sustains us as we write our story, and leaving a few words about a story is always a nice thing to do, whether the story is new or old.
Every fifteen minutes HASA hilights a story chosen at random from the Reviewed and General stories in the archive. The current story is
Drink a Cup by SheBit
A drinking song sung by the men of Gondor in remembrance of those who fought against Sauron over Mordor.
Why not go here and check out the currently featured story?
Many talented writers are publishing every day. Check out these stories just added to HASA:
Reviewed Stories
My Shing Stars by Oshun
And now for something controversial: Elrond stands on the deck of the ship carrying him to Aman writing notes in a journal.
The Green Flash by DrummerWench
Written as 2007 holiday gift for Dawn Felagund to following prompt: "Fingon and Turgon, younger, in Valinor. You hint about their relationship--or lack thereof--a lot, and I find myself thinking on this when reading your stories. So I'd like to see a scene between them. It doesn't have to be serious or even revealing; just a hint of what there was between the two brothers in Aman."
~*~
General Stories
Prince of Horses, Lord of Stone by Elen Kortirion
Prince Theodred is prevented from travelling to the Fords of Isen by a strange message, and is sent to Parth Galen to rescue Boromir... 'where the quest balances on a knife-edge'... and the changes this entails, when Theodred eventually fights at the Pelennor and Boromir at the sieges of Lothlorien and Dol Guldur. (Adult, WIP)
With Hope and Without Hope by docmon
One decision made differently - the Three Hunters run through that second night of their chase after the Orcs rather than rest - and everything changes. Well, not everything. They're merely captured by the Orcs like Merry and Pippin. Not in the plan. (WIP)
~*~
Beta Stories
(Please note, you need to be logged in to view these stories.)
A Woman of Valor by Red's Head
The Return of the King told through the eyes of a Haradrim woman, a tale of her escape from enthrallment to the redemption of her spirit. (WIP)
Orcs in Hobbiton by The Lauderdale
AU. Two years after Sauron won the war, his Orcs have come to a Shire under Saruman's dominion. The hobbits that are its proper inhabitants are caught in the middle. Told in drabbles and double-drabbles. (AU)
This week's focus:
One of the best ways to get involved at HASA is through our forums. People are discussing research questions and stories as well as having fannish squees regularly there.
Some useful forum links:
"On Our Minds" displays the ten most recent posts in forums open to all HASA members. It's a good way to catch up on what you've missed, though the page can move quickly when lots of forums are active at once.
If you've been out of touch for longer than a few days you might want to use the "One Month of Posts" page. This page has just what it sounds like: a list of forums that have been posted to in the last month, beginning with the most recently updated.
Workshops are specialized writing communities. They allow you to share stories you aren't ready to post to the whole site, and many have interesting forums attached to them. Explore workshops to find a group of members interested in similar topics. (You must be logged in to see this link.
Now, here are some of the most recently-updated threads in HASA forum. Don't be shy. If any interest you, why not jump in?
HASA Birthday Card Forums
Subject: Re: June 2008 Birthdays
Prospective Challenges
Subject: Re: Challenge Proposal: Tiny AUs
MEFAs – The Middle-earth Fanfiction Awards
Subject: MEFA 2008: A Reminder for Nominated Authors
Here's hoping this week finds you having many interesting discussion about all things Tolkien. Because, really, you were trying to cut back on sleep anyway, right?
Until next time,
Marta
PS- Do you have something in particular you would like included in next week's announcement? If so, please contact me here.
Due to a mix-up on my part, last week's announcement wasn't posted. Ergo, this week you get all the features that would have been posted last week as well as this week.
BIRTHDAY DRABBLES
No members had birthdays last week or this week. If you're in the drabbling mood, you can still write a drabble for this month's sole birthday baby:
Beruthiel [June 7] requested "a scene between Pippin and Faramir, before Pippin leaves for the battle at the Black Gate."
The following drabble has been written in the following week:
For Want Of... by Larner for Beruthiel
If you have a birthday in June and would like a drabble about your favorite character or topic, you can request it here.
The thread to request drabbles for next month isn't up, but it should be before too much longer. Keep an eye out for it!
Last week's focus:
RECENTLY UPDATED STORIES
All of us writers love feedback. It is the lembas and miruvor that sustains us as we write our story, and leaving a few words about a story is always a nice thing to do, whether the story is new or old.
Every fifteen minutes HASA hilights a story chosen at random from the Reviewed and General stories in the archive. The current story is
Drink a Cup by SheBit
A drinking song sung by the men of Gondor in remembrance of those who fought against Sauron over Mordor.
Why not go here and check out the currently featured story?
Many talented writers are publishing every day. Check out these stories just added to HASA:
Reviewed Stories
My Shing Stars by Oshun
And now for something controversial: Elrond stands on the deck of the ship carrying him to Aman writing notes in a journal.
The Green Flash by DrummerWench
Written as 2007 holiday gift for Dawn Felagund to following prompt: "Fingon and Turgon, younger, in Valinor. You hint about their relationship--or lack thereof--a lot, and I find myself thinking on this when reading your stories. So I'd like to see a scene between them. It doesn't have to be serious or even revealing; just a hint of what there was between the two brothers in Aman."
~*~
General Stories
Prince of Horses, Lord of Stone by Elen Kortirion
Prince Theodred is prevented from travelling to the Fords of Isen by a strange message, and is sent to Parth Galen to rescue Boromir... 'where the quest balances on a knife-edge'... and the changes this entails, when Theodred eventually fights at the Pelennor and Boromir at the sieges of Lothlorien and Dol Guldur. (Adult, WIP)
With Hope and Without Hope by docmon
One decision made differently - the Three Hunters run through that second night of their chase after the Orcs rather than rest - and everything changes. Well, not everything. They're merely captured by the Orcs like Merry and Pippin. Not in the plan. (WIP)
~*~
Beta Stories
(Please note, you need to be logged in to view these stories.)
A Woman of Valor by Red's Head
The Return of the King told through the eyes of a Haradrim woman, a tale of her escape from enthrallment to the redemption of her spirit. (WIP)
Orcs in Hobbiton by The Lauderdale
AU. Two years after Sauron won the war, his Orcs have come to a Shire under Saruman's dominion. The hobbits that are its proper inhabitants are caught in the middle. Told in drabbles and double-drabbles. (AU)
This week's focus:
FORUMS
One of the best ways to get involved at HASA is through our forums. People are discussing research questions and stories as well as having fannish squees regularly there.
Some useful forum links:
"On Our Minds" displays the ten most recent posts in forums open to all HASA members. It's a good way to catch up on what you've missed, though the page can move quickly when lots of forums are active at once.
If you've been out of touch for longer than a few days you might want to use the "One Month of Posts" page. This page has just what it sounds like: a list of forums that have been posted to in the last month, beginning with the most recently updated.
Workshops are specialized writing communities. They allow you to share stories you aren't ready to post to the whole site, and many have interesting forums attached to them. Explore workshops to find a group of members interested in similar topics. (You must be logged in to see this link.
Now, here are some of the most recently-updated threads in HASA forum. Don't be shy. If any interest you, why not jump in?
HASA Birthday Card Forums
Subject: Re: June 2008 Birthdays
Prospective Challenges
Subject: Re: Challenge Proposal: Tiny AUs
MEFAs – The Middle-earth Fanfiction Awards
Subject: MEFA 2008: A Reminder for Nominated Authors
Here's hoping this week finds you having many interesting discussion about all things Tolkien. Because, really, you were trying to cut back on sleep anyway, right?
Until next time,
Marta
PS- Do you have something in particular you would like included in next week's announcement? If so, please contact me here.
Sunday, June 8, 2008
HASA Announcement - Recent Resources Additions
BIRTHDAY DRABBLES
The following members have birthday this week. If you're in the drabbling mood, why not write them 100 words as a birthday card?
Beruthiel requested "a scene between Pippin and Faramir, before Pippin leaves for the battle at the Black Gate."
The following drabbles have been written in the previous week:
"At the Sign of the Prancing Pony" by Nath for Dwim
"Inevitable" by Gwynnyd for Dwim
If you have a birthday in June and would like a drabble about your favorite character or topic, you can request it here.
This week's focus:
RESOURCES.
The HASA Research Library is a very useful resource for writers as well as for online discussions on book canon. You can find entries on characters, settings, events, and items, containing cited quotes about the item you are trying to find more information on. This portion of the site is available to both members and non-members at http://www.henneth-annun.net/resources/index.cfm.
Would you like to get involved with Resources? If you like researching and want to help develop this section of HASA you can contact the Resources & Research Library through the contact form at http://www.henneth-annun.net/about/contact.cfm.
What's new in Resources:
Timeline Events:
Tidings of Sauron's passing reach Minas Tirith. (25 March, 3019 T.A./1419 S.R.)
Elven Smiths of Eregion begin to Forge Rings of Power (1500 S.A.)
Character Biographies:
Nahar
The Tooks
Places
Straight Road
Sirion
Things:
Thains of the Shire
Laurelin
Good luck researching your story! If you enjoy this section of the site please feel free to thank the researchers, listed at the bottom of every entry.
And always remember, grasshopper: the path of wisdom leads through proper citations. *grins*
Marta
PS- Do you have something in particular you would like included in next week's announcement? If so, please contact me here.
Sunday, June 1, 2008
HASA Announcements - Bday Drabbles, Funding Update, Challenges
HASA FUNDING UPDATE
No website is truly free. HASA does not display ads or charge for memberships, but there are still costs associated with running the website. The website depends on member donations to pay its monthly hosting fee of $150.00.
Currently available funding: $220.78
To provide funding through: June 2008
If anyone would like to make a donation, you may do so here.
BIRTHDAY CARDS
No birthday drabbles have been requested for June. Get those requests in so we can write you something!
The following drabbles have been written in the following week:
--- "Least Expected" by Imhiriel for Dwimordene
--- "The Stitch in Time" by Dwimordene for Nath
--- "(untitled double drabble)" by Aiwendiel for Dwimordene
--- "Cerin Amroth" by Elena Tiriel for Nath
--- "Winnowing" by Gwynnyd for Dwimordene
--- "The Least of Rings" by Marta for Dwimordene
--- "A New Road or a Secret Gate" by Marta for Dwimordene
--- "Inevitable" by Gwynnyd for Dwimordene
--- "At the Sign of the Prancing Pony" by Nath for Dwimordene
If you have a birthday in June and would like a drabble about your favorite character or topic, you can request it here.
This Week's Focus:
CHALLENGES
Unfortunately, there are no ongoing challenges right now, except the ongoing birthday drabble challenge. Why not select a new one? If we get five people interested we can get another challenge going.
Suggest challenges at the Prospective Challenges forum.
You can also peruse the Nuzgul Hutch (for ideas that have never been challenges) here, or the Oliphaunt Pen (where you can enter pieces for past challenges) here.
Happy writing!
Fangedly yours,
>:-E Marta
PS- Do you have something in particular you would like included in next week's announcement? If so, please contact me here.
Sunday, May 25, 2008
HASA Announcement - Recently-Updated Forums
BIRTHDAY DRABBLES
The following members have birthday this week. If you're in the drabbling mood, why not write them 100 words as a birthday card?
Dwim [May 25] requested any AU drabble or "fics dealing with political situations.
The following drabbles have been written in the following week:
--- "Mercy" by illereyn for Dwimordene
--- "Our Lily" by thelauderdale for Dwimordene
--- "Narn i Hîn Elrond" by Jay of Lasgalen for RiverOtter, Nath, and Dwimordene
--- "(untitled)" by maya_ar for Dwimordene
--- "Land Stroke" by Elena Tiriel for Dwimordene
--- "Least Expected" by Imhiriel for Dwimordene
If you have a birthday in May and would like a drabble about your favorite character or topic, you can request it here.
The thread to request drabbles for next month is not up yet, but should be soon. If you have a birthday in June, be on the lookout for it.
This week's focus:
FORUMS
One of the best ways to get involved at HASA is through our forums. People are discussing research questions and stories as well as having fannish squees regularly there.
Some useful forum links:
"On Our Minds" displays the ten most recent posts in forums open to all HASA members. It's a good way to catch up on what you've missed, though the page can move quickly when lots of forums are active at once.
If you've been out of touch for longer than a few days you might want to use the "One Month of Posts" page. This page has just what it sounds like: a list of forums that have been posted to in the last month, beginning with the most recently updated.
Workshops are specialized writing communities. They allow you to share stories you aren't ready to post to the whole site, and many have interesting forums attached to them. Explore workshops to find a group of members interested in similar topics. (You must be logged in to see this link.)
Now, here are some of the most recently-updated threads in HASA forum. Don't be shy. If any interest you, why not jump in?
May 2008 Birthdays (in HASA Birthday Card Forum)
Question About Avari Elves – Physical Appearance (in Research Questions)
Science in Middle-earth (in Prospective Challenges)
Here's hoping this week finds you having many interesting discussion about all things Tolkien. Because, really, you were trying to cut back on sleep anyway, right?
Until next time,
Marta
PS- Do you have something in particular you would like included in next week's announcement? If so, please contact me here.
Subscribe to:
Posts (Atom)