Answered: Is q2a 1.8.6 more secure than version 1.7.5?
Post date: 2022-05-16 20:43:47
Views: 382

Generally speaking: yes. It's practically always advisable to keep software up to date, because new versions fix known (potentially exploitable) bugs in older versions.

For more information you can review the version history. From a quick glance notable security improvements appear to be:

  • Security fix: prevent use of <embed> and <object> tags. (v1.8.4)
  • Reworked file cache to securely allow cache inside web root. (v1.8.0 beta 2)
  • Password security has been upgraded from sha1 to use PHP's password_hash function where available. (v1.8.0 beta 2)

You should also keep PHP, your webserver and your database updated, since those are part of the system's attack surface as well.
Please click Here to read the full story.
 
Other Top and Latest Questions:
Inflation reports expected to show improvement with a caveat; Warsh heads to Capitol Hill
A toxic stew drags stocks lower as we look at what can get the AI trade back on track
Widow's Bay: Widow's Bay, Season 1
Paramount, WBD hit with lawsuit from 12 states, including California, to block merger
South Carolina governor taps Lindsey Graham's sister to serve as interim senator
China exports in June jump at fastest pace since 2021 as AI boom, tariff rush lift trade
Stock futures are little changed as Middle East tensions escalate; traders await earnings and inflation data: Live updates
U.S. completes strikes against Iran, while Tehran targets Gulf neighbors
I'll get right on it...
Trump proposes 20% toll on cargo through Strait of Hormuz; restarts Iran blockade