Security updates?

Hi, I was considering buying a month of membership to get download access to CBSubs but have a question.

I run a not-for-profit site and the organisation can't afford to pay membership in the long term. If I install the CBSubs addons, what happens if a security flaw is discovered which requires an update? Would my site be left at risk if I didn't pay and download an update?

Thanks,
Marcello

mtl83 wrote: Hi, I was considering buying a month of membership to get download access to CBSubs but have a question.

I run a not-for-profit site and the organisation can't afford to pay membership in the long term. If I install the CBSubs addons, what happens if a security flaw is discovered which requires an update? Would my site be left at risk if I didn't pay and download an update?

Thanks,
Marcello

I believe you have confused things.

CBSubs needs a license to be purchased as explained in the CBSubs area below:

www.joomlapolis.com/cb-solutions/cbsubs

There is no membership plan that give you access to CBSubs.

We have the Advanced membership plan and the Professional membership plan.

Advanced benefits are shown here:
www.joomlapolis.com/cb-solutions/add-ons

and Professional benefits are shown here:
www.joomlapolis.com/cb-solutions/incubator

Both packages give you download privileges to packages (and any updates produced) during the subscription period.

If subscription period ends and an update is produced (security related or not) then you have 2 options:

1 - stay with current version
2 - renew your membership and download new version

Hope all is clear now.

Thanks Nick - I understand.

Can I ask - if a security flaw is found, is it more than likely to be with CB itself rather than with individual plugins? I was thinking that if CB is the component then a plugin's security would only be compromised only if the main CB plugin was. Is this generally correct?

Thanks,
Marcello

mtl83 wrote: Thanks Nick - I understand.

Can I ask - if a security flaw is found, is it more than likely to be with CB itself rather than with individual plugins? I was thinking that if CB is the component then a plugin's security would only be compromised only if the main CB plugin was. Is this generally correct?

Thanks,
Marcello

I cannot make such a statement.
When code is present, code can be vulnerable.