Multicraft Bug Bounty Program

22. May 2015
As a last step before the finalization of the new release we have ordered a security review for Multicraft and we have launched a Bug Bounty program with the good folks over at Bugcrowd.
The program has initially been launched as private so if you're interested in participating and earning monetary rewards for reporting security critical bugs please head over to bugcrowd.com to register for a researcher account. Once you have done so please let us know so we can add you as a researcher to our program.

The bug bounty program will be made public in the future once we have left the initial selection of researchers enough time to review the code.




Multicraft 2.0.0 PREVIEW Release - Updated May 25

27. March 2015
Latest build number: 505251 - Updated May 25.

After a long period of private beta-testing we are releasing the latest PREVIEW build of Multicraft for public testing. This is the 11th preview build and between pre10 and pre11 there have once again been a lot of changes so even though there has been a long period of testing this build still has to be considered unstable. The changelog would be too long for this news entry but a summarized list of the largest changes includes:
New in pre13:
- Fixed JAR update when no config source is specified
- Fixed encoding issue in server variables
- Fixed filename encoding issue under Windows
- Fixed issue in DB initialization form for certain browser versions
- Fixed page leave confirmation when moving between servers
- Fixed plugin tags being removed from server log
- Added missing images
- Go to "My Servers" by default when using the server list
- Parsing fixes for Spigot
- Several minor security enhancements
- Show issued commands in console by default
pre12:
- Implemented Linux disk space quota support
- Added setting for server console date format
pre11 and earlier:
- Implemented server template setup system
- Implemented a default server configuration override for unknown JARs
- Implemented a new default theme using Bootstrap
- Implemented colored console
- Implemented force shutdown (kill) function
- Implemented support for reloading parts of the multicraft.conf while the daemon is running (Settings->Operations)
- Implemented new "Staff" global role for full access to all servers without giving access to panel settings or editing other superusers
- Implemented optional owner selectable server startup parameter system
- Implemented better broken pipe error handling
- Implemented Bukkit plugin version selection
- Implemented support for using SHA2 for password hashes
- Implemented IP network matching for allowedIps
- Implemented Minecraft EULA setting to show button or automatically accept
- Implemented TCP keepalive support for daemon and FTP server
- Implemented advanced daemon side callback functionality
- Implemented option to display console from bottom to top
- Implemented optional per server crash detection settings
- Implemented owner set memory setting
- Implemented setting to control server list access
- Implemented support for different working directory in conf files
- Implemented support for remapping server conf files depending on jar name
- Implemented support for starting the FTP server as a separate process
- Implemented support for stopping or restarting servers based on specific console output
- Implemented support for updating server config files and formats other than server.properties
- Added "Delete all Players" functionality to server player list
- Added "Owner set JAR directory" server setting
- Added Bukkit plugin version compatibility list
- Added CPU/RAM display mode setting
- Added autosave setting when changing JAR file setting of servers
- Added confirmation dialog when leaving server settings page without saving
- Added panel setting for choosing the crypt method to use for passwords
- Added setting to allow users to generate API key
- Added start/stop/restart buttons to console page
- Added super moderator role that can stop/restart/backup servers and access the console
- Added support for server templates using zip files
- Added support for updating conf and JAR files at the same time
- Added theme build system
- Allow more time for shutdown signals to process
- Allow multiple ping failures before restarting a server
- Improved builtin "give" functionality
- Improved crash detection and crash handling
- Improved daemon overview to be more consistent and responsive even on very large installations
- Improved server settings page performance for very large installations
- Improved translation coverage across entire panel
- Made "World Saved" message configurable
- Password reset functionality is now case insensitive
- Performance and security improvements in the FTP server
- Require current user password for password/email change
- Show all servers for users with global role "owner"
- Use daemon FTP IP and port settings for servermove

The full changelog can be found here.

The preview release is available here:
Linux: multicraft-2.0.0-pre13-64.tar.gz
Windows all-in-one: multicraft_standalone-2.0.0-pre13.zip
Windows advanced: multicraft-2.0.0-pre13.zip

We appreciate all feedback, bugreports and suggestions. We will also award monetary bounties for certain security critical bugs, please contact us for details if you think you may have found a relevant bug.




Blesta Multicraft Module - Updated

29. September 2014
We are happy to announce that the good folks over at Blesta have developed a module to fully support Multicraft with their billing software platform. A video of the module in action can be seen in their blog entry regarding this development:
Blesta Blog: New Multicraft Module

The module is part of the official v3.3 release of Blesta so you do not have to install any addons to use this module. If you are using an older version of Blesta you can download the module separately from this forum post.

The documentation for this new module can be found here:
Blesta Multicraft Module Documentation

You can try the new module without obligation by installing the free trial of Blesta and connecting it to your existing Multicraft installation.

We will also be sending out 15% discount coupons for Blesta owned licenses with every new purchase of any Multicraft license.




BukGet API changes

26. February 2014
The implementation of the BukGet browser in Multicraft has been updated to the latest version of the BukGet API. This will also fix the issues that recent changes in the BukGet API have caused for most users of the built-in plugin browser.

You can download a package with a set of updated files here:
bg_update_2014.02.zip

Simply replace the existing files of your panel with the files from this archive by extracting the archive into the front end directory of your Multicraft installation (by default /var/www/multicraft or /var/www/html/multicraft).




Bukkit 1.7

01. December 2013
If you are experiencing issues with the server status display when running Bukkit 1.7 that means your configuration files are outdated. You can simply update them under "Settings"->"Update Minecraft" by selecting your current JAR file and ".conf files", then clicking "Download" and "Install" as soon as the download is ready.
If you are using a different JAR file name you need to make sure that you use an updated .jar.conf file with the same name. You can simply copy it from the official craftbukkit.jar.conf or minecraft_server.jar.conf depending on your server type. For more information, please see Custom JAR Files.




BukGet URL change

12. November 2013
The URL for the BukGet API version 2 has changed, causing the BukGet browser to malfunction. To fix this you can simply edit the file protected/models/BgPlugin.php of your panel and change:
    static $apiUrl = 'http://api.bukget.org/api2';
to
    static $apiUrl = 'http://api.bukget.org/2';
at the top of that file.



Minecraft 1.7

25. October 2013
If you are experiencing issues with the server status display when running Minecraft 1.7 that means your configuration files are outdated. You can simply update them under "Settings"->"Update Minecraft" by selecting your current JAR file and ".conf files", then clicking "Download" and "Install" as soon as the download is ready.
If you are using a different JAR file name you need to make sure that you use an updated .jar.conf file with the same name. You can simply copy it from the official craftbukkit.jar.conf or minecraft_server.jar.conf depending on your server type. For more information, please see Custom JAR Files.




Region Fixer How-To

05. October 2013
A new entry has been added to the How-To section:
Adding Region Fixer support

Please let us know if you have any questions or suggestions!




New Website and Contact Information

22. September 2013
We are happy to present you our multicraft.org website in a new look today!
Relevant information has been made more accessible and the new design and underlying bootstrap library improve the overall experience of using our website.

In addition to that the main support address for Multicraft has been changed to [email protected], you can reach us under this address from our contact form.

Stay tuned for more news within the next weeks as we will be looking for new talent to help with our continuing work on the Multicraft hosting platform.