security issues
 

At the moment a mode with a security issue is simply moved to the graveyard.
But this is quite useless for existing users. It would be nice if all users would receive an email that the mod has a security issue.
It would also be useful if there's a general mailing list with security notices.

I recently had to deal with the vbgsitemap exploit, lucky for me it was on the old site, but still took me over an hour to clean up the mess.

Regarding vbgsitemap, an email was sent to those that clicked install and that email has just been sent again. Will look into whether there was an issue with the first email. It has been verified that the second email did go through.

Update: ran a test under the same circumstances as the first email, and the email went through okay.

hmm... I'm pretty sure I clicked install, of course there's no way for me to double check it since all entries in the graveyard can't be flagged as installed and don't show up in the installed mod list.

but I still think a general security forum/mailing-list would be nice so that people can receive all security notices.