We are excited to announce that the beta has begun for Blesta 3.2! If you purchased Blesta direct, you may download blesta-3.2.0-b1 from the client area now (Login required). During installation choose to start a free trial unless you have a dev license you can use. Then, head over to our 3.2 beta forums to report any bugs and let us know what you think.

So what’s in 3.2?

The focus of 3.2 is the client area. The entire client area has been rebuilt on top of Bootstrap 3 and is responsive. Additionally, 4 new responsive order templates have been created, including:

• Ajax Slider (A one page ajax order form with a slider package selector)
• Ajax Boxes (A one page ajax order form with a boxes package selector)
• Wizard Slider (A multi-step wizard order form with a slider package selector)
• Wizard Boxes (A multi-step wizard order form with a boxes package selector)

We really like these new order forms and we hope you do too.

There’s a lot more in this release, see the release notes for details.

When is the final release?

Version 3.2 will be officially released after the beta phase is completed. Generally the beta for a minor release lasts around 2-3 weeks, but it can vary. An official release is only made once we deem it to be stable.

If you have any custom plugins or modules or website integrations, we suggest installing the beta and getting a head start integrating. Anything custom that renders views in the client area will need to be updated.

April Fools! Thanks for playing along. You can still download the plugin and pretend, if you want.

Parallel Payment Optimizer, or “Parallel” for short is a revolutionary new way to increase revenue and lower customer attrition. Parallel is a free plugin for Blesta. Watch the video below (don’t forget to turn on your sound), then download the plugin and start paralyzing today!

Download Parallel

Installation Instructions

1. Click the button above to download.
2. Unzip and upload parallel_po to your /plugins/ directory.
3. Login to Blesta and go to Settings > Company > Plugins > Available.
4. Click the “Install” button for Parallel Payment Optimizer.
5. Go to Tools > Parallel Payment Optimizer and start Paralyzing!

How does it do it?

Parallel utilizes a global cloud of specialized helper bots to send friendly little signals to nonpaying customers. These signals softly nudge your customers into logging in and making payment where other methods of collection typically fail.

Join the Discussion

Join the discussion on our forums and share your experience with the Parallel Payment Optimizer!

A patch has been released for Blesta that addresses bugs discovered since 3.1.2 was released. As usual, a big thanks to everyone who reported and confirmed these bugs on our forums, we appreciate your help.

You can read more information about this patch, including the release notes, on our forums at http://www.blesta.com/forums/index.php?/topic/2168-release-313/ A patch has been released for Blesta that addresses bugs discovered since 3.1.2 was released. As usual, a big thanks to everyone who reported and confirmed these bugs on our forums, we appreciate your help.

You can read more information about this patch, including the release notes, on our forums at http://www.blesta.com/forums/index.php?/topic/2168-release-313/

Download Link

blesta-3.1.0-3.1.3.zip

To patch your installation, please follow the instructions for Patching an Existing Install from our user manual.

A patch has been released for Blesta that addresses bugs discovered since 3.1.0 was released. This patch also addresses various staff permission issues that affect 3.0.0-3.0.9 and 3.1.0-3.1.1. Please see the advisory. If you have untrusted staff users, we strongly recommend patching your installation.

You can read more information about this patch, including the release notes, on our forums:

For 3.0.10 see http://www.blesta.com/forums/index.php?/topic/2035-release-3010/ A patch has been released for Blesta that addresses bugs discovered since 3.1.0 was released. This patch also addresses various staff permission issues that affect 3.0.0-3.0.9 and 3.1.0-3.1.1. Please see the advisory. If you have untrusted staff users, we strongly recommend patching your installation.

You can read more information about this patch, including the release notes, on our forums:

For 3.0.10 see http://www.blesta.com/forums/index.php?/topic/2035-release-3010/

For 3.1.2 see http://www.blesta.com/forums/index.php?/topic/2036-release-312/

Download Link

blesta-3.0.0-3.0.10.zip (3.0.10 patch)
blesta-3.1.0-3.1.2.zip (3.1.2 patch)

To patch your installation, please follow the instructions for Patching an Existing Install from our user manual. Don’t forget to run /admin/upgrade in your browser.

Affected Versions

Versions 3.0.0 through 3.0.9, and 3.1.0 through 3.1.1 are affected.

Description

Active and valid staff members may be able to access areas of the application without proper ACL permissions. Additionally, staff members may not be logged out immediately after being made inactive. These issues are classified as Moderate vulnerabilities. Patch release 3.0.10 and 3.1.2 correct these vulnerabilities.

Resolution

If you are running 3.0.x upgrade to version 3.0.10. If you are running 3.1.x upgrade to version 3.1.2.

Related tasks:

1. CORE-1062
2. CORE-1063
3. CORE-1064

Credits

CORE-1062 was discovered by Nerijus Barauskas at NGnTC. CORE-1063 and CORE-1064 were discovered by the Blesta Development Team.