This policy covers every phpBB extension and project in the phpBB Modders organization.

Security fixes go into the latest release of each extension. Older releases are not patched; update to the latest release first.

Please do not report security problems in public issues, discussions, or the forum.

Email board@phpbbmodders.com instead, and include:

• Organization: phpBB Modders (phpbbmodders)
• Project: the repository name, for example phpbbmodders/groupwarn
• the phpBB, PHP, and extension versions affected
• steps to reproduce, and what an attacker could do with it

Reports that don't name the organization and the project may be missed.

You'll get a reply once the report has been looked at. Please give the maintainers a reasonable chance to release a fix before disclosing the problem publicly.