Prevent users from logging in to your Drupal site unless they know the secret key to add to the end of the login form page. ( default: http://example.com/?q=user/login&admin )
If your site has clean urls enabled you may use http://example.com/user/login?admin instead.
If a user does find out about the secret key they will still have their user account role checked during authentication. If they do not have the 'bypass disabled login' granted they will be refused access and displayed a customisable "denied" message.
This module is ideally suited for website content freezes during a migration or functionality upgrade.
Supporting organizations:
Development & maintenance
Issue queue, maintenance and Drupal 9 development
Project information
Minimally maintained
Maintainers monitor issues, but fast responses are not guaranteed.- Maintenance fixes only
Considered feature-complete by its maintainers. - Project categories: Access control
497 sites report using this module- Created by budda on , updated
Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.
