Before login hook

By rodrigo.pssilva on 1 Feb 2012 at 19:46 UTC

Hi guys!

which hook I need to use when the user submit de login form?

I need the hook that runs before the user is logged in, ie when the form is submitted, and the user isn't logged yet.

I tried hook_user_login but it just works after login
and
I tried hook_user_load too but it just works with a valid username

Can somebody help?

Comments

You can use a hook_form_alter

shadcn commented 1 February 2012 at 20:13

You can use a hook_form_alter on the login form and add your submit handler before the actual form submit handler. If this doesn't make sense I can post some codes.

Hi Arshad Chummun! Thanks for

rodrigo.pssilva commented 2 February 2012 at 12:14

Hi Arshad Chummun!
Thanks for reply!
Can you post some codes please?

Hi nevets!
I'm tying to login in another site using cURL.
First I need to login in my site, after it the user will be logged on Drupal.
I'm writing a module to do it.

Thanks!

<?php/** * Implements

shadcn commented 2 February 2012 at 13:34


/**
 * Implements hook_form_alter().
 */
function MYMODULE_form_alter(&$form, $form_state, $form_id) {
  switch ($form_id) {
    case 'user_login_block':
    case 'user_login' :
      array_unshift($form['#submit'], 'custom_login_submit');
      break;
  }
}

/**
 * Custom submit handler
 */
function custom_login_submit($form, &$form_state) {
  //code here
}

Hello again Arshad! Does

rodrigo.pssilva commented 2 February 2012 at 14:06

Hello again Arshad!
Does hook_form_alter works on Drupal 7?

I'm trying to use mymodule_form_alter function but dont work...
This hook just work when I call it inside template.php

ie mytemplate_form_alter works!

Thanks

I believe you want to replace

nevets commented 2 February 2012 at 15:46

I believe you want to replace the validation function with your own.

hook_form_alter works in

pelach commented 2 February 2012 at 15:58

hook_form_alter works in drupal 7.
make sure you wrote your module name correct.

it's always a good idea to clear cache.

Login validate

aldebaran commented 29 October 2015 at 15:59

We have a website where the admin username isn't "admin" however we do get an uncomfortable number of "admin" login attempts. We now perform a pre login validate based on arshadcn's post. If the username is "admin" we log the attempt, sleep for an annoyingly long time then return a WSOD.

function MYMODULE_form_alter(&$form, $form_state, $form_id) {
  switch ($form_id) {
    case 'user_login_block':
    case 'user_login' :
      array_unshift($form['#validate'], 'custom_login_validate');
      break;
  }
}

function custom_login_validate($form, &$form_state) {
    if (isset($form_state['values']['name'])) {
        if (in_array($form_state['values']['name'], array('admin'))) {
            watchdog('user', 'Suspect login attempt to !name', array('!name' => $form_state['values']['name']));
            sleep(60);
            die;
        }
    }
}
?>

Nice :)

Jaypan commented 29 October 2015 at 16:08

Nice :)

Safety First

diamondsea

he/him/his

English

commented 14 February 2018 at 16:36

NOTE: If you are doing something that requires that the login actually be valid, you would have to manually confirm the login is correct before executing it in form_alter or form_validate functions, otherwise you could end up performing something on an account that didn't actually get logged in.

What are you trying to

nevets commented 1 February 2012 at 20:22

What are you trying to achieve (ie why before the user logs in)?

An example

zkent commented 15 July 2014 at 22:00

Here is an example of why someone would want this:

We are using a host (pantheon) where all incoming traffic, for security apparently, uses the same IP. Someone is trying to brute force login on accounts that don't exist and once the IP is blocked, no one in the entire site can log in. I'd normally start blocking IP addresses but I can't. So, instead I'd like to check if the username even exists before attempting a login to avoid this continual locking issue.

On a side note, have you

Codeblind commented 29 October 2015 at 18:31

On a side note, have you contacted Pantheon about this? That sounds more like a misconfigured load balancer. Pantheon's own documentation claims the IP address should be easy to get with $_SERVER['REMOTE_ADDR'] or Drupal's ip_address() function (see https://pantheon.io/docs/articles/drupal/getting-the-client-ip-address/). If all requests come from the same IP address on a production site, it's very likely the flood table will start blocking out all users routinely.