# Security Policy

**PHP User Registration** — https://rskworld.in  
Developer: Molla Samser | RSK World  
Contact: help@rskworld.in | +91 93305 39277  
Year: 2026  

---

## License

This project is licensed under the **MIT License**. See [LICENSE.md](LICENSE.md) for the full text.

---

## Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it responsibly:

1. **Email:** help@rskworld.in  
2. **Do not** open a public issue for security-sensitive bugs.  
3. Include a clear description and steps to reproduce (if possible).  
4. We will respond and work with you to address the issue.

## Security Practices in This Project

- Passwords are hashed with PHP `password_hash()` (bcrypt).
- Database queries use prepared statements to prevent SQL injection.
- Session handling follows secure practices (session regeneration, secure cookies where applicable).
- Email verification and password reset use time-limited tokens.
- Input is sanitized and validated where used.

Thank you for helping keep this project secure.
