By dziemecki on

I want to keep anonymous users (anyone who hasn't logged in) from viewing my site content, but setting the "anonymous user" group to not having "access content" causes the index.php page to come up 404. I just want people to get a nice "Welcome/please log on" screen when they get to the site. They should not be able to view content until the have authenticated (and noe of that security-by-obscurity stuff, either).

Any ideas?

Comments

dziemecki’s picture

dziemecki commented

Since no one else seemed to have any idea, I edited the the node module to block out the content as such:

function node_page() {
  global $user;  
  $curruser = $user->name; 
  $op = $_POST['op'] ? $_POST['op'] : arg(1);
  $edit = $_POST['edit'];

  if(strlen($curruser) < 1) {
    $op = "anon"; 
  }

  if(user_access("access content")){

  switch ($op) {
    case 'anon':
      print theme('page', "Please log in.", "Welcome!");
      break;
    case 'feed':
    ...

Dunno if there is a better way, but it will prevent anyone not logged in from viewing a node without having to turn off the module and break the app.

ti’s picture

ti commented

I've had similar experience when setting up a website for a friend, but only on one particular web host: 1and1.com.