Maybe you could also create a special topic category on the Contact Us for "Security Issue" currently there is just Site Feedback and Registration topics.
7 days is a bit short - authors can be away for that long simply due to being on holiday. If you move to step 5 after this small a time you may be wasting effort.
Oh well, it just seems that you are commiting yourselves to removing a hack, and someone spending time on fixing someone elses bug(s), when the author would be quite willing, but was simply away for a few days. Two weeks just seems a more reasonable time.
Oh well, it just seems that you are commiting yourselves to removing a hack, and someone spending time on fixing someone elses bug(s), when the author would be quite willing, but was simply away for a few days. Two weeks just seems a more reasonable time.
The author is of course also allowed to contact us with an updated version of the hack whenever he has time, even if it's after these 7 days.
As a precaution, and to stop more people installing this (bugged) hack, we feel it is our duty to temporarily remove it.
06-16-2005, 11:16 PM
Official Policy: When Security Vulnerabilities in Hacks are Found
Linear Mode
