ariq01

Thanks Mike, I'll just add, re #2. We can audit the code for a module or plugin for a fee, and label it as "Certified by Blesta". We haven't done this yet for any 3rd party extensions, but we're open to the idea. Re #6. Maybe. This would be on a case-by case basis. But, in large, our recommendation is that the developer release the extension as FOSS on Github.

There are guidelines which are listed here: https://docs.blesta.com/display/dev/Programming+Style+Guide but I'm not sure if Blesta check and force people to change it.
Not that I'm aware of they can be audited if the developer wishes to do so. But if they follow the guidelines on the link above they shouldn't have any issues because the Blesta core is stable.
Depends on the developer again, all Blesta modules / plugins / gateways are open.
Same as point 2.
None.
Nope.

PS these are from my experiences on the forum, the guys can add to the thread when they have time

Based on my previous post, I set out this evening to fix the current security issue with the following goals in mind:
Remove the Manage button by the service listing in all states except Active. Remove the Switch icons on service row expansion in all states except Active. If someone enters the direct URL to the cPanel Extended dashboard it disables all functionality and displays a message that the account is not properly setup (similar to default cPanel module). Add a notification message somewhere in the Admin so an administrator is aware the next time they login. Email an administrator of the failed provision (this might already be an existing Blesta feature). After getting familiar with Blesta and cPanel Extended codebases, I have fixed the issue and accomplished my first three goals. I'll continue to become more familiar with the codebase so I can complete goals 4 and 5 too.
To accomplish goal #1, I wrapped the template code with a status active check. This removed the Manage button in the Options column of the service row. Here is the code:
/app/views/client/[template]/client_services.pdt
<td> <?php if ($this->Html->ifSet($status) == "active") { ?> <div class="btn-group"> <a href="<?php echo $this->Html->safe($this->base_uri . "services/manage/" . $this->Html->ifSet($services[$i]->id) . "/");?>" class="btn btn-xs btn-default"> <i class="fa fa-cog fa-fw"></i> <?php $this->_("ClientServices.index.option_manage");?> </a> </div> <?php } ?> </td> To accomplish goal #2, I wrapped the containing table row with a status active check. This disables the row expansion feature in all service states except active. Here is the code:
/app/views/client/[template]/client_services.pdt
<?php // List all services for ($i=0; $i<$num_services; $i++) { if ($this->Html->ifSet($status) == "active") { ?> <tr class="expand service_info"> <?php } else { ?> <tr> <?php } ?> <td><?php $this->Html->_($services[$i]->package->name);?></td> <td><?php $this->Html->_($services[$i]->name);?></td> To accomplish goal #3, I wrapped the sidebar tab building code with a status active check. This removes all of the cPanel Extended tabs and features from the /services/manage/ view. By removing the Manage button in goal #1 above, the average user will never be able to reach this URL. But for the tech savvy, it wouldn't be hard to figure out. And my goal with this fix is to prevent those tech savvy types from causing harm?  So just in case this URL is called, unless the service is active, no manage features are available. Here's the code:
/app/controllers/client_services.php
public function manage() { $this->uses(array("Coupons", "ModuleManager")); // Ensure we have a service if (!($service = $this->Services->get((int)$this->get[0])) || $service->client_id != $this->client->id) $this->redirect($this->base_uri); $package = $this->Packages->get($service->package->id); $module = $this->ModuleManager->initModule($service->package->module_id); $module->base_uri = $this->base_uri; $method = isset($this->get[1]) ? $this->get[1] : null; // Set sidebar tabs if ($service->status == "active") { $this->buildTabs($service, $package, $module, $method); } I've also attached some screenshots showing the updated UIs where a cPanel Extended service is in PENDING state and management is basically disabled. Overall, I've had a fun night getting familiar with some of the code. Most importantly, I'm happy I was able to fix this security issue for my needs. I welcome any suggestions and advice from the Blesta Developers as well as cyandark. If there's a better way to fix this issue, please share so I can learn in the process. Thanks again for providing this community and everyone here who are so helpful.
Cheers!

 
 
 

Hi,
Thanks for your feedback, cPanel extended has many bugs inherited from the ModulesGarden Version, We are working in new version with many of the functions rewriten from scratch using our Code Style like another Modules that we made from Scratch like SolusVM Extended.
Everybody are welcome to make pull requests in the Github Repo.

Welcome blesta 4
Lutfi Theme 100% free. Written more than 300 element and write with love
Its clean design & powerful premium functionality allows you to creating profesional hosting site. Designed for starup hosting, small hosting company to save expenses
Easy to change colors of elements, modify the parameters of elements, also you can add more shortcode from basic bootstrap element up to 100+ combination.
Free But Premium Features?
Completed HTML Demo File Powerful, Minimal and Clean Design Include features for hosting site Bootstrap 3.3.7 Super Responsive User-friendly & 100% validate Code Sticky Header Mega Menu Font Awesome icons Flat icons Themefy icons Fully customization Minimum Blesta 3.6.2
         Download Lutfi
Demo Main Site | Blesta Demo Ony Image
More functionality & active support? This theme is free version from Kit Material Theme
Note: Element not same with kit
 
Need integration, customization or rebuild theme? please don't hesitate to contact us hendra@jawanet.com Or Submit Ticket

Sounds like he has a .htaccess issue which could be related to SSL.

nice theme.

Sure mate,
I enjoyed working with the blesta interface haha

Version 2 Now Available
Add kit order form (Kit Wizard with sidebar menu) Demo https://blesta-dev.jawanet.com/order/main/packages/vps-kvm/?group_id=1
What's new?
Added Sidebar Menu 20 bug fix with blesta 4 Replace original jquery.sticky.js from blesta with theia-sticky-sidebar.js Update Bootstrap to latest stable 3.3.7 Replace jQuery Animation With Hardware Accelerated Sticky Box Order Summary Deletion Unused Jquery Color changed on blesta demo And More ------------------------------------------------------------------------------------------------------
Kit Material Theme provide multy different UI accent colors. You can change the accent color just editing class without change css. The element is designed for make your work more pleasant. 100+ Preset color & Background included plus 100+ icon included.
Super flexible Hosting HTML template. Highly recommended for small and big hosting company. The layout looks beautiful at any size, be it a laptop screen, Android Mobile or tablets.
Redesigned blesta theme & add avatar profile looks beautiful user interface. Integrated with awesome BlestaCms
Have blestacms license? Get material blesta theme for free, open ticket with licensecart.
Free Installation
Web Demo http://theme-demo.jawanet.com/kit-theme/
------------------
Blesta Demo http://blesta-dev.jawanet.com/
Username: demo@jawanet.com
Password: demouser
-----------------
Main Features
Ultra Responsive Html5 & Css3 Blesta Theme Integrated & Redesigned Top Menu Mega Menu Standar Mega Menu Advanced Label Menu Structured Html Element Shortcode Hosting Features 20+ Animation Element 20+ Includes Material Icon, FontAwesome Icon, Flat Icon Google Fonts Parallax backgrounds 2 Simple Slider ( Revolution Slider Coming Soon) Vps Box Swicth & Vps Slider Bootstrap 3.3.x BlestaCms Ready New Feature/Module On Request Blesta Features
Clean Design Interface Redesign To Material Interface Avatar Profile Based On Default Theme Material Login Seo Setting
General Google Meta
Editing features
Only 1 File To edit navigation Only 1 File To edit footer You can easy add/edit menu from 1 file to every page. No need edit per page.
All help can see on ducumentation file
Blesta Integration
You can easy add menu/footer from 1 file to every page.
Designed for Blesta 4 Compatible With Blesta 3.6.x Minimum Blesta 3.6  
Price $30 [Order Now]

If you have any idea, feature request, questions and more info
please don't hesitate to contact us hendra@jnhost.co.id Or Submit Ticket
We are always happy to hear from you
 
---------------------------------------------------------------------------------------------------
 
 


 
 
 

 
 
 

Hello All .
we bring exclusive content , this time is the Announcement plugin .
A very clean and simple Announcement plugin for Blesta , allows you to post announcements , and make them , Publicly for all or based on clients groups and service's packages.
the plugin can  :
    add/edit/delete Announcement.
    List All Announcements
    Restriced Announcement based on client Group And packages .
    Show widget announcement in client side .
    Option to enable/disable widget in client side.
    Setting to show announcement in full or mixed views.
    Set how much announcement should be displayed in widget client
TODO LIST :
- show widget announcement in client side . Done
- option to enable/disable widget in client side Done
- set how much announcement should be displayed in widget client Done
- allow share buttons or announcement
- allow client to ignore announcement message .
- hide announcement in widget after X days .
- Add RSS announcements (just the public announcements)
- add setting to show announcement in full or mixed views Done
Some screenshoot :
Admin Side :

 
Client Side :
 

 
client widget :
 

 
This Plugin is tested in our test server , no bugs at the moment , in this weekend we will add support for client widget .
as always the installtion steps is :
1 - download the file http://blesta-addons.com/plugin/store/main/item/22/
2 - upload the announcements folder inside plugin directory .
3 - goto plugins , and install Announcements  Plugin .
4 - enjoy the free content .
If anyone wants to have it on their portal you can use this code: (thanks to @Licensecart)
    {% if plugins.announcements %}<div class="col-md-4 col-sm-6 portal-box">         <a href="{client_url}plugin/announcements/client_main/">             <div class="well">                 <i class="fa fa-info fa-4x"></i>                 <h4>Announcements</h4>                 <p>You can see all the latest news here.</p>             </div>         </a>     </div>{% endif %} It will only show up if the module is installed.
This plugin require Basic (Bronze) subscription

Pull request has been merged .
we will update the plugin to be fully compatible with v4 soon .
 

fromwhat i have see , that blesta send emails with two versions, text and html one .
is possible to make blesta send only the HTML one in case HTML is enabled in mail settings?
 
 

I suggest creating a new stylesheet called something like overrides.css, and include that in structure.pdt at the end. This way your custom styles overwrite the originals and your overrides.css file won't be overwritten on upgrade. (You'll just have to add back the include in structure)

There only used to be a paid option for this but Google have their own version now which I think would be so sexy if it was included in Blesta
API: https://developers.google.com/places/web-service/autocomplete#place_autocomplete_requests
Demo: https://developers.google.com/maps/documentation/javascript/examples/places-autocomplete-addressform
 

The counters are dummy you need develop a plugin or something for get the counters.
Check this: 
 

I love navigation

Hi, I have this theme in my computer about half year, this theme is of a cancelled project and I will not use the theme anymore, for this I will decided share the theme to the community, this can be useful for something.
This theme not will receive updates. If you want a customization you can send me a PM to get a quote.

cloud.zip

@naja7host  
You should create a video on youtube for us newbies

Hello All .
@Licensecart has request me to do a simple plugin to fetch client data and include it in your Html Template.
The Plugin Is Available in Github https://github.com/Blesta-Addons/Client_Data
Blesta Plugin That Allow Dev/Themers Get Client Data Info As Json Response , then they can use it in their Template or Plugin .
This Plugin didn't need install, just upload the folder client_data to plugins and you are ready to go .
Not all request should be Done Via Ajax , a direct call will return a blank page .
Example of Requests :
1 - For Tickets, the last element is the Tickets status
Get CLient's Open Tickets
http://your_domain.com/blesta_dir/plugin/client_data/client_main/count_tickets/open
Get CLient's Closed Tickets
http://your_domain.com/blesta_dir/plugin/client_data/client_main/count_tickets/closed
2 - For Services, the last element is the Service status
Get CLient's Active Services
http://your_domain.com/blesta_dir/plugin/client_data/client_main/count_services/active
Get CLient's Suspended Services
http://your_domain.com/blesta_dir/plugin/client_data/client_main/count_services/suspended
3 - For Invoices, the last element is the Invoices status
Get CLient's Open Invoices
http://your_domain.com/blesta_dir/plugin/client_data/client_main/count_invoices/open
Get CLient's Vioded Invoices
http://your_domain.com/blesta_dir/plugin/client_data/client_main/count_invoices/vioded
To get the info by Ajax request in template us this code
<?php $this->Javascript->setInline(' $(document).ready(function() { fetchInvoices("open"); }); function fetchInvoices(status) { $(this).blestaRequest("GET", "' . $this->Html->safe($this->base_uri . "plugin/client_data/client_main/count_invoices/") . '" + status, null, function(data) { if (data) $("#my_div_id_to_replace").html(data); }, null, {dataType:"json"}); } '); ?> To explain the code , you need to change the url and the div to put the requested data .

I don't think you understand. It's nothing to do with the Email addresses! It's the Username...


I can't make it any clearer unless I can get it to jump out at you . And if someone has the same email address anyway then I'd complain to the provider since they shouldn't allow you to have duplicate email accounts.

That's not possible even in the admin area! If you try and use the same username you get this error: "That username has already been taken."
Video: http://screencast.com/t/Ji6LTO5uljx
So either you are editing the core files and getting this issue or you are trying to say people can make the same email address twice with the same provider and they are getting the emails for a wrong account.

I tried this ages ago with 3.x.x and that is filmed on 4.0.0-b1

How to prevent this? i got this problem too.
My clients create 2 accounts with same email. And how to force user, to only use email as login. Not username.
like @naja7host (blesta-addons registration page)?

That shows up even if you enter a invalid username. Please see: https://blesta.store/plugin/support_manager/knowledgebase/view/33/help-i-m-locked-out-my-admin-area/27/

Fixed in Github ....
download the plugin and go to plugin , then update .
thanks for the bug discovery .

Hello
we have make a plugin called Seo Tools that ill boost seo and auto generates sitemaps and ping google and bing .