>From what I understand, in the WordPress world it is a fairly common thing to change the path of the user login page in order to harden the site because this helps prevent bots from finding the login page in the first place.  The other thing that is commonly done is to change the preassigned admin username to something else.

I myself have wondered about how this might be done with Drupal, and have never found an answer.  Although to be honest, i never looked that hard.  So if you do find the answer, or if someone knows the answer to this, please post it back here.

All the Best,
Steve

On Mon, Jan 28, 2013 at 10:28 PM, Walt Daniels <wdlists@gmail.com> wrote:
And you can prevent them from ever getting a username and password by setting People - Account Settings to Admin only. So they have to apply to you to get an ID on the system. Then when they go to /user there is no register tab so they can't even spam you unless they guess the email address of the U=1 user.


On Mon, Jan 28, 2013 at 9:44 PM, Al Sessions <fultonchain@gmail.com> wrote:



On Mon, Jan 28, 2013 at 7:19 PM, Tim Johnson <tim@akwebsoft.com> wrote:
  The 'bottom line' is that
  1)I want a 'secret' node with which to log in as admin
  2)I want the 'user' node to become inactive, or 'access denied'.
   (If it can be done).
  thank you for your help.

I don't understand what the problem is. If they don't have a username and password they can't log in. Just like every other site in the universe.

Then again, just like most things in Drupal, there is a module for this:
<http://drupal.org/project/rename_admin_paths>

No idea if it works.


--

--
[ Drupal support list | http://lists.drupal.org/ ]


--
[ Drupal support list | http://lists.drupal.org/ ]