Call me extra-cautious, but I would like to completely hide my login form. Is there a way?

- I've hidden the login block, from the sidebars.
- But, you can still login at www.mysite.com/user (www.mysite.com?q=user) or even www.mysite.com/user/login. Is there a way to change that? Perhaps rename /user to something like www.mysite.com/secret or www.mysite.com/secret/login?
- Is there a way to use .htacces as another means to protect the login?

We have a very small list of registered users, and will distribute the secret url to them. The general public won't need to log in. I just don't want someone to use some sort of dictionary or brute force attempt to try to gain access.

Much thanks!

Comments

Anonymous’s picture

Maybe the secure site module can help you.
pleas read the help/install and HTTP-AUTH remark in the setup

tcconway’s picture

I'll check em out. Thanks.

Anonymous’s picture

I am not sure if secure site fills your needs, alternative could be to to make a subsite with .htacces password facility or secure site..
good luck