Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
This is a security update. All users of the Disable Login module are strongly encouraged to update.
This release improves how the module enforces access restrictions on user authentication routes. The module is intended to prevent user logins, but in some configurations, not all login endpoints received the correct access checks. This update ensures that access control is consistently applied across all login-related routes, including programmatic authentication paths.
Changes in this release:
Added missing access requirement to specific login routes.