This project is not covered by Drupal’s security advisory policy.

By default, Drupal's maintenance mode permits users to log in, so long as they have the correct permissions.

This module hardens the system: users may not log in; logged in users are logged out. Unless other contrib modules intervene, only the maintenance page is displayed.

Why? This module permits a site builder to shut down Drupal in the event of a security concern that implicates the log in function.

IMPORTANT: You must be able to turn maintenance mode off from the command line (for example, by running "drush vset maintenance_mode 0"). Remember that you will need to clear caches ("drush cc all") after putting the site back online. And if you are using the filecache module, you may need to clean out your filecache directory.

If you cannot turn off maintenance mode from the command line, and this module is enabled, you will be up a creek without a paddle.

Supporting organizations: 

Project information

  • Module categories: Security
  • Created by gbirch on , updated
  • shield alertThis project is not covered by the security advisory policy.
    Use at your own risk! It may have publicly disclosed vulnerabilities.

Releases