BronxWench

As soon as we’re back up and running, I’d be happy to take care of that for you. Right now, while we’re still in read-only mode, I can’t do that.

The validity or benefit of reviews isn’t really what’s being discussed here. It’s an inquiry into the ability of readers to leave reviews, and it’s very much related to that, rather than the quality or quantity of reviews. There’s a whole other thread for that elsewhere.

Unfortunately, we can’t shut off the review feature, even though it’s not working properly. I’m pretty sure profile updates aren’t saving properly, either, so you may still be receiving anonymous reviews. I know how frustrating this is, really. Everyone is doing all they can to resolve the situation, but if putting the archive online is only going to result in another attack, it’s not prudent. Once the site is properly hardened against this sort of attack, we can get back to being what we’re supposed to be—a fiction archive with readers and writers interacting happily.

We are not affiliated with FFN or any other fiction archive, so membership elsewhere would have no bearing here. Right now, with the archive in read-only mode, it is not possible to create a new archive profile. The forum is working just fine, but an AFF archive profile is required for forum registration, so until the archive is up and running, I’m afraid there isn’t much we can do. Our coder and admin are working as quickly as they can to resolve the issues we’ve had, and we hope to be able to return to normal sooner rather than later.

We’re seeing this same thing with reviews. You can write a review, and post it, and the site will say that it uploaded, but the review is not there. If you add a chapter, it will appear to work but the chapter will not actually be posted.

Thank you for the confirmation—I suspected as much but hadn’t had the time to test it myself.

While the archive is still in read-only mode, I don’t think anyone is going to be able to post reviews. For the time being, if an author has a review reply thread, I urge readers to post reviews there so authors can see them.

I'm in agreement with WillowDarkling, gentlemen. Take this to DM, please. It’s not relevant to the site’s status, which was the purpose of this thread.

Two questions: Is this for a Forum account? If yes, do you have an existing Archive account?

I’m sharing the PM with @DemonGoddess so she has the link.

The archive is in read-only mode because we have a very persistent hacker targeting the site with sql injection attacks. Until the site is protected against further sql injection attacks, it’s safest for our members if we leave it in read-only mode. While the site is in read-only mode, there’s going to be functions that will remain disabled, and that includes password resets. Until we’re up and running properly again, you won’t be able to reset your password and log in. None of us, not even the moderating staff, can reset a password right now. Patience is the word for now. Our coder and our admin are working as quickly as they can to resolve the situation.

Right now, while the site is still in read-only mode, reviews can’t be removed. If you leave a link to the review url, I’d be happy to remove the review once the site is back up and running again.

Right now, while the site is still in read-only mode, reviews can’t be removed. If you leave a link to the review url, I’d be happy to remove the review once the site is back up and running again.

@Deadman is correct. Once the site is back up and running properly again, we have a great FAQ on posting stories right here: https://www2.adult-fanfiction.org/forum/topic/63417-how-to-upload-a-story/

Our coder and admin are working as fast as they can to resolve the issues with the archive. We don’t have an exact date. It’s a very involved and time-consuming process, and they are devoting a great deal of their time to this site, in addition to their day jobs and families. Keep an eye on the home page of the archive for updates.

Are you trying to register with the forum or with the archive? If you are trying to register with the archive, it is in read-only mode at the moment, and new registrations are on hold. If you are trying to register for the forum, you need a registered account with the archive to join the forum.

I’m working on something, that will hopefully coalesce before Samhain.

I do understand, and I appreciate the concern you have for the site’s safety.

It’s going to be a bit before I can delete the account, since the archive is in read-only mode at the moment. It would help to have an idea of what account you’d like deleted, however, since I don’t have an archive profile matching the guest name you’re using.

I’m sure our server host runs scans regularly for the servers. It would only be sensible for them to do so, and since we’ve never had an issue with malware originating from the host servers, I can be confident they do an excellent job. We don’t have the access to the servers to run scans ourselves, since we basically buy space on another company’s physical hardware. That’s why I emphasize the need for running individuals scans on the hardware we each own and use to access the site.

Access to the database itself is strictly controlled. Only DemonGoddess and manta2g have direct access. My moderating staff is exceedingly small, and doesn’t have the limited abilities that I have as lead moderator. I’ve met most of them in person, and I am entirely sure that none of my moderators are responsible for this series of attacks. Further, I myself run Malwarebytes Premium daily on my computer, and take every precaution when I have occasion to visit other sites in the course of my moderating duties. I know it’s easy to point a finger at human beings, and wonder if they are the proximate cause of the issues, but in this case, you’re way off base. The idea of using immoral means to achieve what a person believes is a moral end is neither improbable or unheard of, in my experience. Hypocrisy is as much a common human trait as any other, and the same people who email me demanding that I remove a story they dislike would scream the loudest if I removed a story they did like. It’s naïve to think otherwise.

I don’t think we need to escalate to the point of firearms. However, we are not the only site that hosts adult fiction, and I don’t think the attack is because of our content. I do think we need to secure the site as much as is possible against this sort of incursion, and I do think we need to, at the very least, report the attacker to his/her ISP if not to the Federal authorities who investigate cybercrimes. There’s no financial gain to be had from attacking us, and the attacks appear to be intended to disrupt the normal operations of the site. The attacks redirect our members to sites of dubious provenance and probable malware, which is my concern. We value our members, and don’t want to have our site used to harm them. So, once again, NEVER CLICK ON LINKS THAT YOU DON’T KNOW and make sure your antivirus/malware protections are up to date. Secure yourself with two-factor authentication, and change your passwords regularly if you’re not using two-factor authentication. This is something we all need to do to protect ourselves.

Argh. Maybe we need to enlist that fellow on YouTube who hacks phone spammers…

It will depend on what kind of documentation we can put together, but I’d be more than happy to deal with IC3 and their endless bureaucracy. I’m used to Federal agencies and paperwork.