Switch update checks to json to prevent object injection hacks.
Disable the ability to call functions in escaped sql strings.
Bump version to 2.0.18.7.