This application is intentionally vulnerable and created for educational purposes only. It should NEVER be deployed to production environments.

This security policy covers the intentional vulnerabilities included in this educational application.

This application contains the following intentional security vulnerabilities:

• SQL Injection
• Cross-Site Scripting (XSS)
• Insecure Authentication
• Broken Access Control
• Command Injection
• Insecure File Upload
• Sensitive Data Exposure
• Security Misconfiguration
• And many more...

Since this application is intentionally vulnerable, please do not report the intentional vulnerabilities as security issues. However, if you find:

1. Unintended vulnerabilities that were not meant to be included
2. Improvements to the educational content
3. Issues with the documentation

Please report them by opening an issue in the GitHub repository.

This is an educational project and is not intended for production use. There are no "supported" versions in the traditional sense.

If you're using this application for learning:

1. Never deploy to production
2. Run only in isolated environments
3. Use for educational purposes only
4. Do not store real user data
5. Do not use real credentials

1. Use this application to learn about security vulnerabilities
2. Practice identifying and fixing security issues
3. Understand the impact of different vulnerability types
4. Learn about secure coding practices by fixing the issues

This software is provided for educational purposes only. Users are responsible for ensuring they use this software in compliance with applicable laws and regulations. The authors are not responsible for any misuse of this software.