The license is per user, so you would be required to purchase a second license to be in compliance. I don't offer any discounts.
I've been doing updates for more than 30 years now. Your only guarantee is past history. The date is the last major release date that you are looking at. There have been lots of bug fix updates since then. The actual build was updated less than a month ago. I'll continue to make updates when necessary.
The latest versions have cross site scripting protection built in that prevents html and scripts from running from the database. To remove it, you can either update the rsobj.php file and change the line:
$this->CrossSiteProtect = false;
or the better option is to only change it where you need it when the value is displayed like:
$Recordset->getColumnVal("Column", false);
by adding the "false" at the end, it tells the code to remove the cross site scripting protection and allow code to be displayed in that one instance while keeping the cross site scripting in place everywhere else.