If you make changes to the PHP code in your CivicSpace site you should keep track of those changes using tools such as patch and diff. Please read http://drupal.org/diffandpatch for instructions. We have found that when important security updates are released CivicSpace sites may not be updated because administrators are not sure of the changes they have made. Patch tools can be used to re- apply changes after a security upgrade.