Security Notice

A security hole has been found in this version that could allow a sub-user to access parts of the server that they were not assigned permission for. We recommend disabling sub-users or updating to 0.7.6.1 which can be found here.

Hotfix

0.7.6 has a bug that may occur when trying to add a server to a node that is not running on the default GSD listening ports. For most use cases this bug will not be encountered. However, if you are planning on running GSD on a port other than 8003 please see this diff and make that change to your file.

Security Patches

• Fixes a security hole that existed in previous versions due to missing GSD features which could allow a malicious user to control a node. (#169) (#226)
• GSD tokens for servers and nodes can now be manually reset from the panel for security purposes. (#330)
• Fixes a security hole where a SQL call may allow for a remote attacker to access the database or execute malicious commands. (#335)

Bug Fixes

• Fixes a bug that could add a blank port if a space is used when defining a range. (#288)
• Fixes a bug that prevents renaming the startup server jar from the panel. (#295) (#309)
• Fixes a 500 Server Error that could occur if date.timezone is not set in php.ini (#299)
• Fixes a bug where turning on a server would still display "Server if offline" in the console. (#307)
• Fixes a bug when trying to view folders in nested directories in the file manager. (#314)
• Better error handling when powering on a server. (#317)
• Fixes a bug preventing showing a message when a jar file is renamed successfully. (#318)
• Panel now sends gamehost to GSD to prevent a server from being run on the default listening IP of a node. (#320)
• Better handling of massive server.log files when loading the console. Now only returns the last 750 lines of the log. (#325)
• Add a newline after starting the server in the console. (#328)
• Fixes a bug where the CPU limit for a server could not be edited after creation (#329)
• Fixes bug where installer could still be run even if dependencies were missing. (#331)
• Fixes a bug where some email clients may force links to be https even when not enabled. (#339)
• Fixes a bug where no warning was displayed when a user did not have permission to complete a function. (#342)
• Fixes a bug where the Server Management tab would display for users even if they didn't have permission to view it. (#346)
• Fixes a bug that prevented the console from scrolling to the bottom when switching to the console tab. (#347)
• Fixes a bug that caused the ACP to show a node as offline even when it was on due to a hard-coded listening port. (#359)
• Fixes a bug that caused a massive PHP notice log when viewing the Admin CP Index. (#369)

New Features

• Internal code improvements for speed and reliability.
• Overhauled File Manager. You can now create and upload files/folders, as well as edit, delete, download, and (un)zip files directly from the panel. (#244)
• Definable amount of memory and disk for each node. (#302)
• Clicking on the logo now redirects you to the panel index. (#305)
• Live updating list of players who are currently playing on the server. (#312)
• Panel now automatically redirects to the installer if it has not been run yet. (#322)
• Changing settings in the ACP now displays errors and successes visually. (#323)
• Nodes can now be deleted. (#333)
• Granting sub-permissions for a user now automatically grants the parent permission. (#337)
• Nodes can now be assigned to a location for ease of deployment and organization. (#350)
• Nodes can now be set to public or private for automatic deployment purposes. (#351)

Installing

Installing PufferPanel is now easier than ever. Simply read our installing documentation which will walk you through the entire process for setting up the panel.

Updating

Updating PufferPanel can now be done in a few simple steps, no need to re-run the installer or set up new nodes! To upgrade PufferPanel, simply follow the upgrading documentation which will walk you through the entire process. The automatic upgrader is still considered a beta feature, but we have done testing and it should get everything set up nicely for you. As always, take backups before proceeding for safety.