News: Cakephp 1.3.18 and 2.4.8 released on April 29, 2014

Cakephp core team has announced the availability of Cakephp 1.3.18 and 2.4.8 on April 29, 2014. Cakephp Developers, who are struggling with security issues, now recommended to use SecurityComponent.

Lists of expected changes in 1.3.18 are given below:

• Model conditions containing : or ? are now handled correctly. This fixes issues around using casting in conditions
• SecurityComponent form tampering hashes now include the URL path as a hash input.

Lists of expected changes in 2.4.8 are given below:

• SQLServer now properly appends the schema name when describing tables.
• Hash::extract() can now match boolean attributes.
• fclose() errors when using shells should no longer happen.
• CakeResponse::file() now throws an exception when paths contain '..'.
• ShellDispatcher now casts argv to an array. This fixes issues when cake console was invoked from a non-cli SAPI.
• TextHelper::autoLink() now correctly links urls with subdomains containing '\_'.
• SecurityComponent form tampering hashes now include the URL including the query string as a hash input.

Original Source: http://bakery.cakephp.org/articles/markstory/2014/04/29/cakephp_1_3_18_and_2_4_8_released