How to update to the latest files before a new release for security reasons?

[MasterPlebien]

Hello,

I am running the latest v1.8.1. However, I have been keeping myself updated with the commits done to the codes and have made some adjustments to the code myself as well.

I see that an important security patch has been made to ajax.php and a few other minor commits.

How do I update my live site to keep it safe as I cannot update via composer yet as there isn't a new release yet. Just afraid running php artisan nexus:update might cause issues.

Thank you!

[xiaomlove]

You can upgrade to v1.8.2 now

[slrslr]

Was this security issue introduced in this fork or in original script?
My script version does not feature ajax.php and include/globalfunctions.php has no "$uid <=" nor "unauthenticated".
If the sec. issue is in original, then can anyone kindly mention what was the issue in original code?

[xiaomlove]

what version are you using?

[slrslr]

https://github.com/burpheart/NexusPHP_safe
https://github.com/search?q=repo%3Aburpheart%2FNexusPHP_safe+ajax&type=code