security

2014-02-12

3.1.1

Patch released

1 min

2013-12-20

3.0.7

Patch released

1 min

2013-10-24

3.0.5

Patch released

1 min

2013-10-07

3.0.4

Patch released

1 min

2013-03-01

Developer Corner

Two-factor Authentication: Why you need it

Why two-factor authentication matters: how TOTP one-time passwords, password entropy, and length protect Blesta accounts even when a password is already compromised.

Cody2 min read

2012-11-01

Developer Corner

Google Authenticator & Blesta

Use Google Authenticator with Blesta for TOTP two-factor login by converting its base32 key to the hexadecimal (base16) format Blesta expects.

Cody1 min read

2012-08-17

Developer Corner

Blesta 3.0: More on Security (video)

Security in Blesta 3.0: bcrypt with HMAC-SHA-256 passwords, two-factor authentication, the PHPIDS intrusion detection plugin, ACL, PDO, and encrypted card storage.

Paul7 min read

2011-08-15

Developer Corner

Blesta 3.0: Eliminating SQL Injection

How Blesta 3.0 stops SQL injection: parameter binding via PDO and the minPHP Record class database object, so escaping and query syntax are handled for you.

Cody1 min read