[web-php] master: Document what the security@ address is not for

Author: Sara Golemon (sgolemon) Date: 2021-05-19T18:23:36Z Commit: https://github.com/php/web-php/commit/078e0eb82cc5a2049b3ccece24f15efbaca6b8b4 Raw diff: https://github.com/php/web-php/commit/078e0eb82cc5a2049b3ccece24f15efbaca6b8b4.diff Document what the security@ address is not for Changed paths: M contact.php Diff: diff --git a/contact.php b/contact.php index e1d390751..3bcad15c4 100644 --- a/contact.php +++ b/contact.php @@ -25,6 +25,19 @@ <p> For security related issues (in PHP or our websites) please contact <a href="mailto:security@php.net">security@php.net</a>. + Please note that the following are <b>NOT</b> security issues: + <ul> + <li><b>Requests for help with using PHP.</b> Please use the + <a href="mailto:php-general@lists.php.net">PHP General</a> mailing list.</li> + <li><b>Source code to the PHP website(s) being publicly readable.</b> + This is <i>on purpose</i>. + All of the php.net websites are available publicly on github. + For example, you can find this site at <a href="https://github.com/php/web-php">github.com/php/web-php</a>.</li> + <li><b>Requests for bug bounty payments.</b> + PHP is run by volunteers with literally zero budget. + The servers are donated hardware and bandwidth. + Your bug reports and patches are appreciated, but we can not pay you for them.</li> + </ul> </p> <p> If you have problems setting up PHP or using some functionality,