New Module: Multicraft

June 3, 2014 | Posted by Paul

Multicraft is popular Minecraft game server control panel, and today we announce the beta release of Multicraft for Blesta, a Blesta module.

Watch the video below, and then scroll down for more details.

Where can I get it?

Multicraft for Blesta is in beta, and available for download in the forums here. The module will be included in our next major release, version 3.3, and is compatible with Blesta 3.2+.

Download Documentation

What does it do?

The module allows the creation, cancellation, suspension, unsuspension, and management of Minecraft servers through Multicraft. Here are some of the client management features:

  • View Server Status
  • Restart Minecraft Server
  • Stop Minecraft Server
  • Start Minecraft Server
  • Set Server to Day Time
  • Set Server to Night Time
  • Set Server Name (If allowed)
  • View Connected Players
  • Kick Players
  • Server Console
  • Log in to Multicraft

Configurable Options

Aside from the many options available at the Package level, this module supports 6 configurable options as well. These can be used for customizing the checkout process, allowing customers to select options that override the Package settings. The options are:

  • user_players – Allow the owner to set the number of players in Multicraft
  • players – Allow the client to select the number of players as a quantity slider, or dropdown menu and charge per-slot
  • memory – Allow the client to select the amount of server memory as a quantity slider, or dropdown menu and charge for memory
  • daemon_id – Allow the client to select the Daemon ID, useful for offering servers in different locations, ie “Los Angeles”, “Dallas”, “Miami” which would correlate to Daemon ID’s in those locations
  • dedicated_ip – Allow the client to order a Dedicated IP address
  • jarfile – Allow the client to select the Minecraft server JAR file. For example, default Minecraft, Bukkit, Tekkit, etc.

All in all, this module is powerful and flexible. Be sure to read the documentation to get started.

Blesta 3.2: Now Available

May 14, 2014 | Posted by Paul

Three.Two is here and it includes a responsive client area and shiny new responsive order forms, all built on Bootstrap 3.1.

Download 3.2

See the documentation for details on how to install or upgrade.

What’s new in 3.2?

  • Responsive client area (Built on Bootstrap 3.1)
  • Responsive new order forms (Built on Bootsrap 3.1)
  • Clients can order addons for existing services within the client area
  • Ability to import and export staff and client area themes
  • New payment gateways, PagSeguro, PayJunction, and Skrill
  • New module, BuycPanel (Sell Licenses!)
  • New plugin, Client Documents
  • Ticket system improvements including: Auto close tickets, split tickets, and merge tickets.

And more, see the changelog!

License Manager

License Manager is a new extension for licensing your software products. It comes with a module that allows Blesta to provision new licenses, and a plugin that serves as a license server to validate those licenses.

License Manager is available to purchase for owned licenses for a one time fee of $100. To purchase, log into the client area, click the Manage button to the right of your owned license, then Addons, then the Add Addon button to order.

What’s next?

Based on your feedback, we have the following features planned for 3.3:

  • Proration
  • Proforma Invoices
  • Price Overrides

There will be more too, of course, but we are doing our best to prioritize development based on demand. Is there a feature you really want to see in a future release? Let us know on our feature requests forum!

Security Advisory – Two-Factor and Privilege Issues

May 14, 2014 | Posted by Cody

Affected Versions

Versions 3.0.0 through 3.1.3 are affected.


A user with a valid username and password may be able to properly validate two-factor authentication using TOTP by guessing the correct code. This issue is classified as a Low vulnerability. (CORE-1213)

An authenticated staff member may be able to affect settings in the system where they are otherwise prohibited via ACL restrictions, via carefully crafted HTTP POST requests under limited circumstances. This issue is classified as a Moderate vulnerability. (CORE-1163)


If you are running 3.0.x or 3.1.0 through 3.1.3 upgrade to version 3.1.4 or version 3.2.0.

Related tasks:

  1. CORE-1163
  2. CORE-1213


CORE-1163 was discovered by the Blesta Development Team. CORE-1213 was discovered by Kyle at MemoryX2.


Blesta 3.2 Beta Released

April 23, 2014 | Posted by Paul

We are excited to announce that the beta has begun for Blesta 3.2! If you purchased Blesta direct, you may download blesta-3.2.0-b1 from the client area now (Login required). During installation choose to start a free trial unless you have a dev license you can use. Then, head over to our 3.2 beta forums to report any bugs and let us know what you think.

iPad Mini Order Wizard

So what’s in 3.2?

The focus of 3.2 is the client area. The entire client area has been rebuilt on top of Bootstrap 3 and is responsive. Additionally, 4 new responsive order templates have been created, including:

  • Ajax Slider (A one page ajax order form with a slider package selector)
  • Ajax Boxes (A one page ajax order form with a boxes package selector)
  • Wizard Slider (A multi-step wizard order form with a slider package selector)
  • Wizard Boxes (A multi-step wizard order form with a boxes package selector)

We really like these new order forms and we hope you do too.

There’s a lot more in this release, see the release notes for details.

When is the final release?

Version 3.2 will be officially released after the beta phase is completed. Generally the beta for a minor release lasts around 2-3 weeks, but it can vary. An official release is only made once we deem it to be stable.

If you have any custom plugins or modules or website integrations, we suggest installing the beta and getting a head start integrating. Anything custom that renders views in the client area will need to be updated.

Parallel Payment Optimizer (video & free plugin)

March 31, 2014 | Posted by Paul

April Fools! Thanks for playing along. You can still download the plugin and pretend, if you want. :)

Parallel Payment Optimizer, or “Parallel” for short is a revolutionary new way to increase revenue and lower customer attrition. Parallel is a free plugin for Blesta. Watch the video below (don’t forget to turn on your sound), then download the plugin and start paralyzing today!

Download Parallel

Installation Instructions

  1. Click the button above to download.
  2. Unzip and upload parallel_po to your /plugins/ directory.
  3. Login to Blesta and go to Settings > Company > Plugins > Available.
  4. Click the “Install” button for Parallel Payment Optimizer.
  5. Go to Tools > Parallel Payment Optimizer and start Paralyzing!

How does it do it?

Parallel utilizes a global cloud of specialized helper bots to send friendly little signals to nonpaying customers. These signals softly nudge your customers into logging in and making payment where other methods of collection typically fail.

Join the Discussion

Join the discussion on our forums and share your experience with the Parallel Payment Optimizer!