Take the 2-minute tour ×
Drupal Answers is a question and answer site for Drupal developers and administrators. It's 100% free, no registration required.

There is no register or login form in front-page or any other pages in my website but every day I receive emails of my website that some people asked for registration, How does such a thing is possible and how do they do this?

share|improve this question
    
Either there is register form somewhere, probably under example.com/user/register, or you are using core with a security bug. –  Mołot Apr 19 at 14:46
    
the core has the latest update, I check them every day. How do I can disable example.com/user/register page? –  Drupalist Apr 19 at 14:54
    
What is the text of the email? Including headers –  AgA Apr 19 at 15:37
    
@AgA something like this: lionel33gmvblkfzjwfu has applied for an account. –  Drupalist Apr 19 at 16:18

2 Answers 2

up vote 3 down vote accepted

By default there's a registration form at /user/register; bots will find it trivial to discover and submit that form.

If you really don't want that path to be accessible you can just use a menu alter to deny access:

function MYMODULE_menu_alter(&$items) {
  $items['user/register']['access callback'] = FALSE;
}
share|improve this answer
    
return $items; is not needed? –  Drupalist Apr 21 at 12:49
2  
$items is passed in by reference so no need to return –  Clive Apr 21 at 12:53
    
yeah you are right. thanks –  Drupalist Apr 21 at 12:59

Go to admin/config/people/accounts and configure : Registration and cancellation for administration only enter image description here

share|improve this answer
    
I already did this before, but I was wondering how do they do this!] –  Drupalist Apr 19 at 16:17
    
@Drupalist Always put information in question what you tried. –  Rupesh Apr 19 at 16:31

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.