How do I modify /user to a custom URL?

Question

I have some small Drupal 7 sites that don't require me to log in all the times, and there are no users. I would like to change the user login path to something else to deter bots targeting Drupal installations on the /user path.
How can I achieve this?

I can add a CAPTCHA, but I want to change the path too.

Answer 1

See the Rename Admin Paths module. The purpose of this module is to secure drupal backend by overriding admin path. You can change user/login to something like member/login. I would also suggest adding a redirect in your htaccess to the standard user/login user/register. This way Drupal doesn't also have to serve up the 404 when a bot tries to access those pages. Huge performance savings.

EDIT: Thinking about this further, you don't need an extra module at all. Just add an alias at /admin/config/search/path/add for user/login, user/register etc, then just add redirects in your htaccess for the old aliases.

Answer 2

1.You can render login form on any site or in any block like this:

$form = drupal_get_form("user_login"); 
$form = drupal_render($elements);
print $form;

You then just need to set proper alias for this page.

2.hook_preprocess_page(&$variables).

$current_path = current_path();
 $current_alias = drupal_get_path_alias($current_path);
 if($current_alias == 'user'){
   drupal_goto('my-url');
 }

Answer 3

I have a quick and easy solution I use for this scenario with no modules required. Use htaccess to redirect any visitors to user or user/login to a 404 (or I redirect them to a hidden page that logs their IP address so I can track how often they visit). Then when you want to login just user a bogus parameter in the url like /user/login/12345 This will send 99% of these spam bots off into space :)

Answer 4

You have a couple approaches to change the "user" Drupal path to "my-url":

First, you imitate the way Drupal defines the "user" path on user core module. In that way your "my-url" page will have same behavior than the original one.

Then, to complete the work you will need to redirect all "user" requests to your "my-url" path. To do that you can use custom code by using the hook_menu_site_status_alter() hook or you could use the redirect module.

Here's a quick implementation with custom code:

/**
 * Implements hook_menu().
 */
function yourmodule_menu() {

  // Registration and login pages.
  $items['my-url'] = array(
    'title' => 'User account',
    'title callback' => 'user_menu_title',
    'page callback' => 'user_page',
    'access callback' => TRUE,
    'file' => 'user.pages.inc',
    'weight' => -10,
    'menu_name' => 'user-menu',
    'file path' => drupal_get_path('module', 'user'),
  );

  return $items;
}

/**
 * Implements hook_menu_site_status_alter().
 */
function yourmodule_menu_site_status_alter(&$menu_site_status, $path) {
  if ($path == 'user') {
    drupal_goto('my-url');
  }
}

Note: the redirect module is not integrated with features module. If you want to propagate automatically this change to all your environments I suggest you to use custom code.

Answer 5

Example:

/**
 * Implements hook_url_outbound_alter().
 */
function custom_module_url_outbound_alter(&$path, &$options, $original_path) {
  // Alter paths for login and sign-up pages.
  if ($path === 'user/login' || $path === 'user/sign-up') {
    $path = 'omfg';
  }
}