Security
Draft — not yet reviewed or adopted.
Written as a starting point and not reviewed by the church. Two things in particular need a real decision before this page is published: which address security reports should go to, and who is responsible for applying Drupal updates once the site is live. The text below assumes the parish office address, which may not be the right one.
This is a small parish website. It holds no payment details and no member database. Even so, if you notice something about it that looks wrong or unsafe, we would rather hear from you than not.
Reporting a concern
Email stthomasmonroe@gmail.com with what you found and how to see it. Please give us a reasonable chance to fix it before describing it publicly. We are a volunteer-run parish, so a reply may take a few days.
If the matter is urgent — someone's personal information is exposed, or the site is serving content we did not put there — telephone (318) 343-4089 as well, so it reaches a person quickly.
What we ask
- Please do not run scans or tests that would take the site down or slow it for others.
- Please do not access, alter or download anyone's personal information. If you come across some, stop and tell us.
- Please do not use a finding to demand payment.
We do not run a paid bug bounty and cannot offer a reward, but we are glad to acknowledge anyone who reports something in good faith.
What we do
- The site is served over HTTPS, so what passes between your browser and the site is encrypted.
- Software updates are applied to the site and its underlying platform.
- Messages sent through the contact form go to parish email; they are not published anywhere on this site.
What this page is not
This covers the website only. It is not about safeguarding, pastoral concerns, or the safety of children and vulnerable adults in the life of the parish. Those matters go to our clergy and to the Episcopal Diocese of Western Louisiana, which has its own procedures. If a person is in immediate danger, call 911.