Official Policy: When Security Vulnerabilities in Hacks are Found
 

good idea, hope it proves successful :)

Sounds good.

Great idea!

Maybe you could also create a special topic category on the Contact Us for "Security Issue" currently there is just Site Feedback and Registration topics.

Regards,

Matt

Great idea! Thanks guys.

Looks good overall - just one point ;

7 days is a bit short - authors can be away for that long simply due to being on holiday. If you move to step 5 after this small a time you may be wasting effort.

:)

/me LIKE Policies...

7 days might seem short from a coders point of view, but it can be long from the end-users point of view, depending on how serious the risk is.

Oh well, it just seems that you are commiting yourselves to removing a hack, and someone spending time on fixing someone elses bug(s), when the author would be quite willing, but was simply away for a few days. Two weeks just seems a more reasonable time. :)

The author is of course also allowed to contact us with an updated version of the hack whenever he has time, even if it's after these 7 days.

As a precaution, and to stop more people installing this (bugged) hack, we feel it is our duty to temporarily remove it.

I'm with it!