I'm about to build another site, and it dawned on me that over the last year or so I've updated several sites, and I wondered if the latest version in the downloads had all the latest security patches applied or do I need to go back and apply them.
The two that are most prominent to me is the patch released in 9/2008 for Sql injection and the more recent admin security patch.
Ruth



