Blog · publishing since 2008
Release announcements, version previews, security advisories, and the occasional detour — written by the team building Blesta.
Following the v3 alpha release, Blesta 3.0 adds a CLI installer with license and first-staff setup handled in the browser, plus a browser installer at launch.
Use Google Authenticator with Blesta for TOTP two-factor login by converting its base32 key to the hexadecimal (base16) format Blesta expects.
Blesta 3.0 packages add limited quantities, standard and addon package groups, multi-currency pricing, separate welcome emails, and early cancellation fees.
Blesta 3.0 Client Themes let you match the client area to your website from Settings, no code required, while keeping the option to edit markup directly.
Blesta 3.0 introduces The Marketplace, built into the app so users can browse third-party extensions, read ratings, and install them with a single click.
Blesta 3.0 Staff BCC Notices let staff opt in to copies of client emails, limited by staff-group permissions so they only see notices their role allows.
A building power outage killed a Linux box and exposed corrupt R1Soft backups, recovered via shell tricks, with Blesta v3 alpha now rapidly approaching.
Security in Blesta 3.0: bcrypt with HMAC-SHA-256 passwords, two-factor authentication, the PHPIDS intrusion detection plugin, ACL, PDO, and encrypted card storage.
30-day free trial · No credit card · Your server
Everything on this blog ships in the box. Full product, free for 30 days, on your own server.